4006 matches found
PT-2024-27404 · Kodezen Limited · Academy Lms
Name of the Vulnerable Software and Affected Versions: Academy LMS versions 2.0.4 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, in Kodezen Limited Academy LMS. This vulnerability allows for redirection to...
WordPress plugin Responsive Image Gallery security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-22008 · Unknown · Eskooly Free Online School Management
Name of the Vulnerable Software and Affected Versions: Eskooly Free Online School Management Software versions 3.0 and earlier Description: The issue allows a remote attacker to escalate privileges via the Token Handling component. This is a Cross Site Request Forgery vulnerability...
PT-2024-28391 · Unknown · Best House Rental Management System
Name of the Vulnerable Software and Affected Versions: Best House Rental Management System version 1.0 Description: The issue allows attackers to read arbitrary PHP files and access other sensitive information within the application through the Page parameter at "index.php". This is an arbitrary...
PT-2025-54260
Name of the Vulnerable Software and Affected Versions Ksenia Security Lares version 1.6 Description The software contains a URL redirection issue in the 'cmdOk.xml' script. Attackers can manipulate the redirectPage GET parameter to redirect authenticated users to arbitrary websites via a speciall...
CVE-2024-36278
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion...
PT-2024-20045 · Savignano · S/Notify
Name of the Vulnerable Software and Affected Versions: savignano S/Notify versions prior to 4.0.2 for Confluence Description: A Cross Site Request Forgery CSRF issue allows attackers to manipulate a user's S/MIME certificate or PGP key via malicious links or emails. Recommendations: For versions...
FFmpeg 安全漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version 7.0, which stems from a boundary error in hevcframeend in libavcodec/hevcdec.c:2947:22 when handling untrusted input. A remote...
CVE-2024-35116
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack caused by an error applying configuration changes. IBM X-Force ID: 290335...
WordPress plugin Conversios cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
Admiror Frames Security Vulnerability
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Admiror Frames versions prior to 5.0, which stems from vulnerability to a server-side request forgery attack that allows an attacker to access local files or server pages...
Hangzhou Meisoft Information Technology FineSoft Cross-Site Scripting Vulnerability
Hangzhou Meisoft Information Technology Finesoft is a pharmaceutical management software from Hangzhou Meisoft Information China. A cross-site scripting vulnerability exists in Hangzhou Meisoft Information Technology FineSoft v.8.0 and earlier versions, which can be exploited to allow a remote...
CVE-2024-5966
The Grey Opaque theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Download-Button shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2024-3036
Improper Input Validation vulnerability in ABB 800xA Base. An attacker who successfully exploited this vulnerability could cause services to crash by sending specifically crafted messages. This issue affects 800xA Base: from 6.0.0 through 6.1.1-2...
WordPress Widget Bundle plugin <= 2.0.0 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Widget Bundle versions = 2.0.0...
WordPress plugin Widget Bundle security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security...
Absolute Secure Access Security Vulnerability
Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...
Absolute Secure Access Security Vulnerability
Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.06. An attacker exploited the vulnerability resulting in a significant...
WordPress phpinfo() WP plugin <= 5.0 - Unauthenticated Data Exposure vulnerability
Unauthenticated Data Exposure vulnerability discovered by LuxF0z Patchstack Alliance in WordPress Plugin phpinfo WP versions = 5.0...