Code injection

Improper Control of Generation of Code 'Code Injection' vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1...

CVE-2023-49830 WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)

Improper Control of Generation of Code 'Code Injection' vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1...

CVE-2023-49830

CVE-2023-49830 concerns Brainstorm Force Astra Pro Addon (vulnerable: Astra Pro

pro-eps.fr Improper Access Control vulnerability OBB-3825257

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

VulnCheck KEV: CVE-2018-20470

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal arbitrary file access vulnerability exists in the web reports module. This allows an outside attacker to view contents of sensitive files...

WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)

Software Custom 404 Pro Type Plugin Vulnerable versions = 3.10.0 Fixed in 3.10.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51540 Patch priority Medium CVSS severity Medium 7.1 Developer Kunal Nagar PSID ae8e6b89c98e Credits Kyle Sanchez Required privilege...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

Improper access control

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2159900)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which is caused by a lack of proper validation of user-supplied data and can lead to deserialization of untrustwort...

Jamf Pro Security Vulnerability

Jamf Pro is an Apple device management solution from Jamf USA. A security vulnerability exists in Jamf Pro Server versions prior to 10.46.1, which stems from an access control corruption during the authentication process...

Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2160197)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which can be exploited by an attacker to execute code in the context of LOCAL SERVICE...

CVE-2023-31224

Jamf Pro Server before 10.46.1 has a broken access control issue in authentication. Affected product: Jamf Pro Server (pre-10.46.1). Root cause: improper access control during the authentication process. Impact: high confidentiality, integrity, and availability per CVE-2023-31224. Remediation: up...

Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2160098)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which is caused by failing to properly validate a user-supplied string before executing a system call with it. An...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

Voltronic Power ViewPower Authentication Bypass Vulnerability

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. An authentication bypass vulnerability exists in Voltronic Power ViewPower Pro, which can be exploited by an attacker to bypass authentication on the system...

PT-2023-23245 · Jamf · Jamf Pro Server

Name of the Vulnerable Software and Affected Versions: Jamf Pro Server versions prior to 10.46.1 Description: The issue is related to broken access control during authentication. Recommendations: For Jamf Pro Server versions prior to 10.46.1, update to version 10.46.1 or later to resolve the issu...

Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2159801)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which is caused by a lack of proper validation of user-supplied data. An attacker can exploit the vulnerability to...

Voltronic Power ViewPower SQL Injection Vulnerability

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower Pro suffers from a SQL injection vulnerability that is caused by failing to properly validate a user-supplied string before constructing a SQL query using it. An attack...