PT-2023-29906 · G5Theme · G5Theme Grid Plus

Name of the Vulnerable Software and Affected Versions: G5Theme Grid Plus – Unlimited grid plugin versions = 1.3.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a...

TEM Opera Plus FM Family Transmitter 35.45 Cross Site Request Forgery Vulnerability

CSRF Change Forward Power: -------------------------...

TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution Vulnerability

TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution Vendor: Telecomunicazioni Elettro Milano TEM S.r.l. Product web page: https://www.tem-italy.it Affected version: Software version: 35.45 Webserver version: 1.7 Summary: This new line of Opera plus FM Transmitters combines very high...

TEM Opera Plus FM Family Transmitter 35.45 Cross Site Request Forgery

CSRF Change Forward Power: -------------------------...

The vulnerability of the Web page rendering modules in WebKitGTK+ and WPE WebKit lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Web page rendering modules in WebKitGTK+ and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

TEM Opera Plus FM Family Transmitter 35.45 XSRF

Summary This new line of Opera plus FM Transmitters combines very high efficiency, high reliability and low energy consumption in compact solutions. They have innovative functions and features that can eliminate the costs required by additional equipment: automatic exchange of audio sources,...

TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution

Summary This new line of Opera plus FM Transmitters combines very high efficiency, high reliability and low energy consumption in compact solutions. They have innovative functions and features that can eliminate the costs required by additional equipment: automatic exchange of audio sources,...

The vulnerability of the software in the FactoryTalk Linx automation system, which is part of Rockwell Automation PanelView Plus, allows a intruder to access confidential information or cause service failures.

The vulnerability of the FactoryTalk Linx automation system software included in Rockwell Automation PanelView Plus relates to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...

The vulnerability of the Herces library on the C++ platform of the BigFix Platform for collaborative management of IT equipment allows a hacker to execute arbitrary code.

The vulnerability of the Herces library on the C++ platform used by the BigFix Platform for jointly managing IT equipment is due to a numerical overflow. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code by sending a specially crafted HTTP request...

WordPress Grid Plus Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Grid Plus Type Plugin Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46209 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 08eeb73facf3 Credits Le Ngoc Anh Required...

jetty: Improper validation of HTTP/1 content-length

A flaw was found in Jetty that permits a plus sign + preceding the content-length value in a HTTP/1 header field, which is non-standard and more permissive than RFC. This issue could allow an attacker to request smuggling in conjunction with a server that does not close connections after 400...

CVE-2023-36954

TOTOLINK CP300+ V5.2cu.7594B20200910 and before is vulnerable to command injection...

CVE-2023-36954

TOTOLINK CP300+ V5.2cu.7594B20200910 and before is vulnerable to command injection...

CVE-2023-36952

TOTOLINK CP300+ V5.2cu.7594B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg...

CVE-2023-36952

TOTOLINK CP300+ V5.2cu.7594B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg...

TOTOLINK CP300+ Buffer Error Vulnerability

The TOTOLINK CP300+ is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK CP300+ version V5.2cu.7594B20200910 and prior versions, which originates from a stack overflow contained in the File parameter of the function UploadCustomModule...

TOTOLINK CP300+ Command Injection Vulnerability

The TOTOLINK CP300+ is a wireless router from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK CP300+ version V5.2cu.7594B20200910 and prior versions, which stems from vulnerability to command injection attacks...

PT-2023-25752 · Totolink · Totolink Cp300+

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP300+ version 5.2cu.7594 B20200910 Description: A stack overflow issue was discovered via the pingIp parameter in the setDiagnosisCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK CP300+ version...

PT-2023-25754 · Totolink · Totolink Cp300+

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP300+ versions V5.2cu.7594 B20200910 and before Description: The issue is related to command injection. Recommendations: For versions V5.2cu.7594 B20200910 and before, at the moment, there is no information about a newer version tha...

The vulnerability of the standard C++ library for Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the standard C++ library for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...