Lucene search
+L

6795 matches found

CVE
CVE
added 2024/01/23 12:00 a.m.100 views

CVE-2024-22076

CVE-2024-22076 affects MyQ Print Server prior to version 8.2 patch 43. The vulnerability allows remote authenticated administrators to execute arbitrary code via PHP scripts accessed through the administrative interface, due to weaknesses in the administrative workflow. The CVSS-derived impact is...

9.8CVSS9.4AI score0.01142EPSS
SaveExploits0References3Affected Software1
Mozilla
Mozilla
added 2024/01/23 12:00 a.m.88 views

Security Vulnerabilities fixed in Thunderbird 115.7 — Mozilla

An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after...

8.8CVSS8.2AI score0.02155EPSS
SaveExploits0References9Affected Software1
Openbugbounty
Openbugbounty
added 2024/01/19 9:19 p.m.6 views

print-shop.ir Improper Access Control vulnerability OBB-3838860

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
HackRead
HackRead
added 2024/01/17 10:19 a.m.12 views

Print on Demand Power: Tech Accessories Driving Shopify Sales

By Uzair Amir The growth of online shopping has opened up opportunities for businesses. One such opportunity is the print on… This is a post from HackRead.com Read the original post: Print on Demand Power: Tech Accessories Driving Shopify Sales...

7.3AI score
SaveExploits0
NVD
NVD
added 2024/01/16 4:15 p.m.20 views

CVE-2023-0479

The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the editothersshoporders capability...

6.1CVSS6AI score0.00516EPSS
SaveExploits2References1
Prion
Prion
added 2024/01/16 4:15 p.m.16 views

Cross site scripting

The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the editothersshoporders capability...

5.8CVSS6AI score0.00516EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2024/01/16 3:55 p.m.77 views

CVE-2023-0479

The CVE-2023-0479 entry affects the WordPress plugin Print Invoice & Delivery Notes for WooCommerce, prior to version 4.7.2. The issue is a reflected XSS vulnerability in an admin note on the WooCommerce orders page, caused by echoing a GET value after a urldecode() cleanup (post-esc_url_raw()), ...

6.1CVSS5.9AI score0.00516EPSS
SaveExploits2References1Affected Software1
OSV
OSV
added 2024/01/12 4:15 p.m.8 views

CVE-2024-0460

A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-print.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

9.8CVSS5.7AI score0.005EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/01/12 12:00 a.m.10 views

Faculty Management System SQL Injection Vulnerability

Faculty Management System is a code-projects open source faculty management system. code-projects Faculty Management System version 1.0 SQL injection vulnerability , the vulnerability stems from /admin/pages/student-print.php file has a SQL injection vulnerability...

9.8CVSS8.1AI score0.005EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/01/12 12:00 a.m.11 views

PT-2024-15577 · Code Projects · Code-Projects Faculty Management System

Name of the Vulnerable Software and Affected Versions: code-projects Faculty Management System version 1.0 Description: A critical issue affects the processing of the file /admin/pages/student-print.php, leading to sql injection. The attack may be initiated remotely. Recommendations: For...

9.8CVSS6.8AI score0.005EPSS
SaveExploits0References8
Packet Storm
Packet Storm
added 2024/01/11 12:00 a.m.294 views

PHPJabbers Cinema Booking System 1.0 Cross Site Scripting

Exploit Title: PHPJabbers Cinema Booking System v1.0 - Reflected Cross-Site Scripting Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/cinema-booking-system/sectionDemo Version: v1.0...

7.4AI score0.0042EPSS
SaveExploits2
ATTACKERKB
ATTACKERKB
added 2024/01/03 9:15 a.m.4 views

CVE-2023-7068

The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on theprintpackinglist action in all versions up to, and including, 4.3.0. This makes it possible for authenticated...

6.5CVSS5.4AI score0.00387EPSS
SaveExploits0References3
OSV
OSV
added 2024/01/03 9:15 a.m.6 views

CVE-2023-7068

The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on theprintpackinglist action in all versions up to, and including, 4.3.0. This makes it possible for authenticated...

6.5CVSS5.8AI score0.00387EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/03 12:00 a.m.9 views

PT-2024-15196 · WordPress · Woocommerce Pdf Invoices

Name of the Vulnerable Software and Affected Versions: WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress versions up to, and including, 4.3.0 Description: The issue is related to unauthorized access of data due to a missing capability check on the...

6.5CVSS6.7AI score0.00387EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/01/03 12:00 a.m.10 views

WordPress Plugin WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS6.8AI score0.00387EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:00 a.m.8 views

The vulnerability of the lp8000_print_page() function in the gdevlp8k.c component of the Ghostscript software processing suite allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the lp8000printpage function in the gdevlp8k.c component of the Ghostscript software suite relates to the execution of operations outside the buffer memory. Exploiting this vulnerability could allow an attacker to compromise data integrity and also cause service failures...

7.1CVSS7.5AI score0.00462EPSS
SaveExploits0References8Affected Software4
Positive Technologies
Positive Technologies
added 2023/12/25 12:00 a.m.9 views

PT-2023-8708 · Unknown · Myq Print Server

Name of the Vulnerable Software and Affected Versions: MyQ Print Server affected versions not specified Description: The issue is related to incorrect code generation management in the MyQ Print Server, allowing a remote attacker to execute arbitrary code. This could potentially expose sensitive...

10CVSS7.7AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/12/25 12:00 a.m.11 views

PT-2024-22: (Unauth Remote Code Execution) in MyQ Print Server

The vulnerability was identified in MyQ Print Server, versions 8.2 patch 43. An Unauthenticated Remote Code Execution vulnerability can be exploited by an attacker to gain elevated privileges on the target server. Vulnerability status: Confirmed by vendor Date of vulnerability detection: 25.12.20...

9.8CVSS7.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/14 12:00 a.m.13 views

PT-2023-35638 · Git +1 · Binutils

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the loongarch split args by comma, print insn loongarch, and disassemble sectio...

6.9AI score
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2023/12/11 8:43 p.m.4 views

print-my-pdf.com Cross Site Scripting vulnerability OBB-3810681

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder