2262 matches found
PT-2023-32087 · WordPress · Image Horizontal Reel Scroll Slideshow Plugin
Name of the Vulnerable Software and Affected Versions: Image horizontal reel scroll slideshow plugin for WordPress versions up to, and including, 13.3 Description: The issue is related to Stored Cross-Site Scripting via the 'ihrss-gallery' shortcode due to insufficient input sanitization and outp...
IBM MQ Appliance Path Traversal Vulnerability
The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from International Business Machines IBM. A path traversal vulnerability exists in IBM MQ Appliance versions 9.3 LTS and 9.3 CD, which stems from a vulnerability that could allow a remote...
Low: traceroute
Issue Overview: In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines. CVE-2023-46316 Affected Packages: traceroute Issue Correction: Run dnf update traceroute --releasever 2023.3.20231211 or dnf update --advisory ALAS2023-2023-452 --releasev...
PT-2023-31390 · Unknown · Rocket Maintenance Mode & Coming Soon Page
Name of the Vulnerable Software and Affected Versions: Rocket Maintenance Mode & Coming Soon Page versions n/a through 4.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...
CVE-2023-49363
Rockoa 2.3.3 is vulnerable to SQL Injection. The problem exists in the indexAction method in reimpAction.php...
PT-2023-14146 · Siemens · Siplus Logo! 12/24Rce +6
Name of the Vulnerable Software and Affected Versions: LOGO! 12/24RCE versions 8.3 and later LOGO! 12/24RCEo versions 8.3 and later LOGO! 230RCE versions 8.3 and later LOGO! 230RCEo versions 8.3 and later LOGO! 24CE versions 8.3 and later LOGO! 24CEo versions 8.3 and later LOGO! 24RCE versions 8....
CVE-2023-49956
An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP Open Charge Point Protocol for electric vehicles. A StopTransaction message with any random transactionId terminates active transactions...
GPAC Security Vulnerabilities
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev617-g671976fcc-master, which stems from the presence of a memory leak vulnerability...
CVE-2023-48697 Azure RTOS USBX Remote Code Execution Vulnerability
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in...
Azure RTOS USBX Buffer Error Vulnerability
Azure RTOS USBX is a USB host, device, and mobile OTG embedded stack for Azure RTOS open source. Fully integrated with Azure RTOS ThreadX, it is available for all processors that support Azure RTOS ThreadX. A buffer error vulnerability exists in Azure RTOS USBX versions prior to 6.3.0, which stem...
Azure RTOS NetX Duo Security Vulnerability
Azure RTOS NetX Duo is an advanced, industry-grade TCP/IP networking stack open-sourced by Azure RTOS. A security vulnerability exists in Azure RTOS NetX Duo versions prior to 6.3.0 that stems from the presence of a memory overflow vulnerability, which could be exploited by an attacker to cause...
PT-2023-7889
Name of the Vulnerable Software and Affected Versions Backup Migration plugin for WordPress versions up to, and including, 1.3.7 Description The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the...
CVE-2023-46820
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Iulia Cazan Image Regenerate & Select Crop.This issue affects Image Regenerate & Select Crop: from n/a through 7.3.0...
CVE-2023-47851
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Akhtarujjaman Shuvo Bootstrap Shortcodes Ultimate allows Stored XSS.This issue affects Bootstrap Shortcodes Ultimate: from n/a through 4.3.1...
jshERP Security Vulnerabilities
jshERP Huaxia ERP is a homegrown ERP system by the personal developer of Ji Sheng Hua in China. A security vulnerability exists in jshERP version V3.3, which originates from an Access Control Error vulnerability. An attacker can exploit this vulnerability to obtain sensitive information via the...
CVE-2023-6225
The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sumeta shortcode combined with post meta data in all versions up to, and including, 5.13.3 due to insufficient input sanitization and output escaping on user supplied...
GPAC Security Vulnerabilities
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev617-g671976fcc-master, which stems from a memory leak vulnerability in component gfmpdparsestring mediatools/mpd.c:75...
CVE-2023-26364
@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS. Exploitation of this issue does not require user interaction or privileges...