CVE-2021-46387

CVE-2021-46387 affects ZyXEL ZyWALL 2 Plus Internet Security Appliance. The issue is a Cross-Site Scripting (XSS) vulnerability caused by insecure URI handling, enabling an attacker to execute arbitrary JavaScript in a user’s browser and potentially perform clipboard hijacking or session hijackin...

CVE-2022-24446

An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers and user information even if no SSH server or user is associated to the operator...

Design/Logic Flaw

An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers and user information even if no SSH server or user is associated to the operator...

CVE-2022-24446

An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers and user information even if no SSH server or user is associated to the operator...

CVE-2022-24446

The CVE-2022-24446 entry concerns Zoho ManageEngine Key Manager Plus 6.1.6, where a user with Operator privileges can view all SSH servers and related user information regardless of associations. The connected documents confirm the affected software and the underlying issue as an access-control w...

WordPress Multifox Plus plugin < 1.1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Multifox Plus plugin versions 1.1.1. Solution Update the WordPress Multifox Plus plugin to the latest available version at least 1.1.1...

WordPress Store Locator Plus® – Gravity Forms Locations plugin < 5.9.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Store Locator Plus® – Gravity Forms Locations plugin versions 5.9.1. Solution Update the WordPress Store Locator Plus® – Gravity Forms Locations plugin to the latest available version at least 5.9.1...

WordPress Multifox Plus plugin < 1.1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Multifox Plus plugin versions 1.1.1. Solution Update the WordPress Multifox Plus plugin to the latest available version at least 1.1.1...

WordPress "Notification Plus – Social Proof, Fomo, WooCommerce Recent Sales Notifications & Popups for WordPress" plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress "Notification Plus – Social Proof, Fomo, WooCommerce Recent Sales Notifications & Popups for WordPress" plugin versions = 1.0.1. Solution No patched version available...

WordPress Store Locator Plus® – Gravity Forms Locations plugin < 5.9.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Store Locator Plus® – Gravity Forms Locations plugin versions 5.9.1. Solution Update the WordPress Store Locator Plus® – Gravity Forms Locations plugin to the latest available version at least 5.9.1...

Command Execution Vulnerability in TOTOLINK N302R Plus

Ltd. is a high-tech foreign enterprise located in Shajing, Baoan, Shenzhen. A command execution vulnerability exists in TOTOLINK N302R Plus, which can be exploited by attackers to execute commands...

The vulnerability of the Windows GDI+ component in Windows operating systems allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Windows GDI+ component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to the device...

ManageEngine ADManager Plus < Build 7115 RCE

Zoho ManageEngine ADManager Plus before version 7.1 Build 7115 is affected by a filter bypass flaw which allows an unauthenticated, remote attacker to upload a file to execute arbitrary code. Note that Nessus has not tested for this issue but has instead relied only on the application's...

CVE-2020-8107

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...

CVE-2020-8107

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...

Design/Logic Flaw

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...

CVE-2020-8107

The CVE-2020-8107 entry concerns a vulnerability in Bitdefender Antivirus Plus (ProductAgentUI.exe) where a specially crafted DLL can tamper with product settings. Affected products are Bitdefender Antivirus Plus, Internet Security, and Total Security with versions prior to 24.0.26.136. The root ...

CVE-2020-8107 Process Control vulnerability in Bitdefender Antivirus Plus

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...

Bitdefender Antivirus Plus 安全漏洞

Bitdefender Antivirus Plus is a suite of antivirus software from the Romanian company Bitdefender that primarily provides cyber threat detection and ransomware protection. A security vulnerability exists in Bitdefender Antivirus Plus, which originates from a process control vulnerability in...

PT-2022-12266 · Svgpp +3 · Svg++ +3

Name of the Vulnerable Software and Affected Versions: SVGPP SVG++ library version 1.3.0 Description: The XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance, resulting in a null pointer reference. This issue ...