3046 matches found
NVIDIA GPU Display Driver 安全漏洞
NVIDIA GPU Display Driver is a driver from NVIDIA Corporation that is used to interactively support the graphics card display module in the operating system. A security vulnerability exists in NVIDIA GPU Display Driver that originates from a denial of service or information disclosure. Affected...
Kiwi TCMS 跨站脚本漏洞
Kiwi TCMS is Kiwi TCMS open source a leading open source test management system for manual and automated testing. A cross-site scripting vulnerability exists in Kiwi TCMS versions prior to 12.1. An attacker exploiting this vulnerability can execute JavaScript code...
CVE-2023-23330
amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion...
eXtplorer 安全漏洞
eXtplorer is a PHP-based file manager. A security vulnerability exists in eXtplorer version v.2.1.15, which stems from an insecure privilege vulnerability that can be exploited by remote attackers to execute arbitrary code via the index.php component...
CVE-2022-47592
Reflected Cross-Site Scripting XSS vulnerability in Dmytriy.Cooperman MagicForm plugin = 0.1 versions...
CVE-2022-40699 WordPress Yet Another Stars Rating Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)
Cross-Site Scripting XSS vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin = 3.1.2 versions...
Microsoft Dynamics 跨站脚本漏洞
Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The following products and...
Microsoft Dynamics 跨站脚本漏洞
Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The following products and...
CVE-2022-47166
Cross-Site Request Forgery CSRF vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder plugin = 2.1.1 versions...
CVE-2023-1267 SQLi in Ulkem Company's PtteM Kart
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ulkem Company PtteM Kart. This issue affects PtteM Kart: before 2.1...
CVE-2023-1263
The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6 via the cmpgetpostdetail function. This can allow unauthenticated individuals to obtain the contents of any non-password-protected, published post or page even wh...
PT-2023-20018 · Unknown · Prism Launcher
Name of the Vulnerable Software and Affected Versions: Prism Launcher versions up to v6.1 Description: The issue allows attackers to perform a directory traversal via importing a crafted .mrpack file. This can be exploited by importing a specifically designed .mrpack file, potentially leading to...
PT-2023-20452
Name of the Vulnerable Software and Affected Versions Saleor versions prior to 3.1.48 Saleor versions prior to 3.7.59 Saleor versions prior to 3.8.0 Saleor versions prior to 3.9.27 Saleor versions prior to 3.10.14 Saleor versions prior to 3.11.12 Description Some internal Python exceptions are no...
Quest KACE Systems Management Appliance 跨站脚本漏洞
Quest Software Quest KACE Systems Management Appliance is an IT asset management appliance from Quest Software, USA. A security vulnerability exists in Quest KACE Systems Management Appliance SMA version 12.1 and earlier. An attacker can exploit this vulnerability to remotely inject arbitrary web...
Grafana 跨站脚本漏洞
Grafana is Grafana open source set of open source monitoring tools that provide a visual monitoring interface . The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus. A cross-site scripting vulnerability exists in Grafana version 8.1, which stems from map attributes not...
IBM MQ 输入验证错误漏洞
IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable, validated messaging backbone for service-oriented architectures SOA. An input validation error vulnerability exists in IBM MQ for HPE NonStop version...
CVE-2023-24258
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request...
CVE-2022-4754 Easy Social Box <= 4.1.2 - Contributor+ Stored XSS via Shortcode
The Easy Social Box / Page Plugin WordPress plugin through 4.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...
Apollo 跨站请求伪造漏洞
Apollo is a set of PHP scripts by Alex Breen, an individual developer. It is designed to provide a web-based interface for students to upload coursework. A security vulnerability exists in Apollo versions prior to 2.1.0, where a low-privileged user can create a special web page, which an...