3046 matches found
CVE-2023-47554
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in DenK BV Actueel Financieel Nieuws – Denk Internet Solutions plugin = 5.1.0 versions...
CVE-2023-32701
Improper Input Validation in the Networking Stack of QNX SDP versions 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition...
CVE-2023-48020
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/task/changeStatus...
CVE-2023-46099
A vulnerability has been identified in SIMATIC PCS neo All versions V4.1. There is a stored cross-site scripting vulnerability in the Administration Console of the affected product, that could allow an attacker with high privileges to inject Javascript code into the application that is later...
Blackberry QNX SDP Security Vulnerability
Blackberry BlackBerry Qnx Sdp is a software development platform from Blackberry Canada. A security vulnerability exists in Blackberry QNX SDP versions 6.6, 7.0, and 7.1, which stems from an improper input validation issue in the Networking Stack, resulting in the presence of an information...
PT-2023-30398 · Abbott · Id Now
Name of the Vulnerable Software and Affected Versions: Abbott ID NOW versions prior to 7.1 Description: The issue allows modification of the startup process and device configurations via physical access to an internal serial port. Direct physical access is required to exploit this issue. Settings...
CVE-2023-46634
Cross-Site Request Forgery CSRF vulnerability in phoeniixx Custom My Account for Woocommerce allows Cross-Site Scripting XSS.This issue affects Custom My Account for Woocommerce: from n/a through 2.1...
PT-2023-32295 · WordPress · Powr Plugin
Name of the Vulnerable Software and Affected Versions: POWR plugin for WordPress versions up to, and including, 2.1.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'powr-powr-pack' shortcode due to insufficient input sanitization and output escaping on...
IBM CICS TX 安全漏洞
IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM CICS TX Advanced version 10.1, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can...
CVE-2023-34177
A vulnerability in keha WP-Cache.com wp-cachecom.This issue affects WP-Cache.com: from n/a through = 1.1.1...
Combodo iTop Cross-Site Scripting Vulnerability
Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management and other functions. A cross-site scripting vulnerability...
PrestaShop Authorization Issues Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts, and product image scaling. An authorization issue vulnerability exists in PrestaShop blockreassurance versions prior to 5.1.4. The...
PT-2023-13999 · Unknown · Export Users Data Csv
Name of the Vulnerable Software and Affected Versions: Export Users Data CSV versions through 2.1 Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the Export Users Data CSV. Recommendations: For versions through 2.1, update to a...
1E Platform Security Vulnerability
1E Platform is a terminal endpoint management and automation solution from 1E. A security vulnerability exists in versions prior to 1E Platform v18.1 that stems from a command that fails to properly validate input parameters, allowing specially crafted inputs to execute arbitrary code with system...
ZOHO ManageEngine Desktop Central Injection Vulnerability
ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. An injection...
PT-2023-9207 · Frrouting +10 · Frrouting +10
Name of the Vulnerable Software and Affected Versions: FRRouting versions through 9.0.1 Description: The issue is related to the improper handling of a crafted BGP UPDATE message with a MP UNREACH NLRI attribute and additional NLRI data that lacks mandatory path attributes. This can cause a crash...
CVE-2023-5464
The Jquery accordion slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2023-5443
Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Account Footprinting.This issue affects E-invoice: before 2.1...
CVE-2023-44219
A local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earlier versions allows a local low-privileged user to gain system privileges through running the recovery feature...