The vulnerability of the Super Socializer plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Super Socializer plugin of the WordPress content management system exists due to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Blog2Social plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Blog2Social plugin of the WordPress content management system exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Guardium Cloud Key Manager (CKM), a data encryption software from IBM Guardium, allows a perpetrator to execute arbitrary code.

The vulnerability of the Guardium Cloud Key Manager CKM, a data encryption software from IBM Guardium, exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially create...

The vulnerability of the Ditty plugin in the WordPress content management system allows a hacker to execute XSS attacks.

The vulnerability of the Ditty plugin of the WordPress content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of NagiosXI software, related to the lack of measures taken to protect the website structure, allows attackers to execute XSS-type attacks.

The vulnerability of NagiosXI software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a type of attack known as reflected XSS...

The vulnerability of the LearnPress plugin of the WordPress content management system allows a hacker to carry out XSS attacks.

The vulnerability of the LearnPress plugin for WordPress content management systems exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the MapPress Maps plugin in the WordPress content management system allows a hacker to execute XSS attacks.

The vulnerability of the MapPress Maps plugin for the WordPress content management system exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the status_logs_filter_dynamic.php component of the software network interface card based on the FreeBSD Netgate pfSense operating system allows a intruder to enhance their privileges.

The vulnerability of the statuslogsfilterdynamic.php component of the software network interface layer based on the FreeBSD Netgate pfSense operating system is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a...

CVE-2023-20563

Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...

CVE-2023-20565

Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...

CVE-2023-20565

CVE-2023-20565 is documented in AMD’s embedded/PI firmware advisories (AMD-SB-5001 and related) as a high-severity issue where insufficient protections in System Management Mode (SMM) could allow privilege escalation via local access. The connected AMD bulletin provides mitigations via Platform I...

CVE-2023-20563

CVE-2023-20563 is a documented AMD/PI firmware vulnerability affecting System Management Mode (SMM) with local privilege escalation potential. The Connected AMD bulletin entries (AMD-SB-5001 and AMD-SB-4002) describe multiple affected AMD embedded platforms and indicate mitigations via Platform I...

CVE-2023-20563

Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...

CVE-2023-20563

Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...

CVE-2023-33304

A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials...

Hardcoded credentials

A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials...

CVE-2023-33304

A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials...

CVE-2023-33304

CVE-2023-33304 affects Fortinet FortiClient for Windows (versions 7.0.0–7.0.9 and 7.2.0–7.2.1). The issue is hard-coded credentials that allow bypassing protections via static credentials. According to the sources, exploitation status is not detailed in these documents. Remediation is available: ...