WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Quick Event Manager Type Plugin Vulnerable versions = 9.7.4 Fixed in 9.7.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23974 Patch priority Low CVSS severity Low 5.4 Developer Fullworks Plugins PSID 5e2ae440ff0d Credits yuyudhn...

CVE-2023-23491

The Quick Event Manager WordPress Plugin, version 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its 'qemajaxcalendar' action...

The new Spring Boot version validation and upgrade support in Spring Tools

New releases of Spring Boot are being released on a quite frequent schedule and updating your projects to newer versions of Spring Boot is something that many teams and organizations around the globe do as part of their daily work. Sometimes those upgrades are simple and easy, for example for new...

The new Spring Boot version validation and upgrade support in Spring Tools

New releases of Spring Boot are being released on a quite frequent schedule and updating your projects to newer versions of Spring Boot is something that many teams and organizations around the globe do as part of their daily work. Sometimes those upgrades are simple and easy, for example for new...

The new Spring Boot version validation and upgrade support in Spring Tools

New releases of Spring Boot are being released on a quite frequent schedule and updating your projects to newer versions of Spring Boot is something that many teams and organizations around the globe do as part of their daily work. Sometimes those upgrades are simple and easy, for example for new...

PT-2023-6550 · WordPress · Quick Event Manager Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Quick Event Manager WordPress Plugin version prior to 9.7.5 Description: The issue is related to a reflected cross-site scripting vulnerability. It affects the category parameter of the qem ajax calendar action. This vulnerability can be...

quickbuffet.co.uk Cross Site Scripting vulnerability OBB-3126934

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-7101 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-882 version DIR882A1 FW130B06 D-Link DIR-878 version DIR 878 FW1.30B08 Description: A stack overflow issue was discovered in the SetQuickVPNSettings module of the D-Link DIR-882 and DIR-878 wireless routers, related to the Password...

D-Link DIR-882 缓冲区错误漏洞

D-Link DIR-882 is a wireless router from China Youxun D-Link.D-Link DIR-882 DIR882A1FW130B06 has a security vulnerability that stems from a PSK parameter found through the SetQuickVPNSettings module that contains a stack overflow. No detailed vulnerability details are currently available...

Fedora 35 : libetpan (2022-df2f4923ea)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-df2f4923ea advisory. A potential bug is found on libetpan that when IMAP client receives invalid STATUS response, an invalid free can occur on mailimapmailboxdatastatusfree. This...

[SECURITY] Fedora 37 Update: xfce4-places-plugin-1.8.3-1.fc37

A menu with quick access to folders, documents, and removable media. The Places plugin brings much of the functionality of GNOME=EF=BF=BD=EF=BF=BD=EF =BF=BDs Places menu to Xfce. It puts a simple button on the panel. Clicking on this button opens up a menu with 4 sections: 1 System-defined...

Event Registration System 代码问题漏洞

Event Registration System is an event registration system with QR codes by Carlo Montero Personal Developer. A security vulnerability exists in the Event Registration System version 1.0, which stems from an incorrect manipulation of the parameter cmd leading to unrestricted file uploads...

CVE-2022-38201

An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain...

Tackle Your Cloud Challenges, One Scenario at a Time

Forrester’s quick start cards cover 18 common issues with cloud migrations and operations, and suggest actions to mitigate each one...

PT-2022-24278 · Esri · Esri Portal For Arcgis Quick Capture Web Designer

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 through 10.9.1 Description: An unvalidated redirect issue exists, allowing a remote, unauthenticated attacker to potentially trick an authenticated user into accessing a domain...

CVE-2022-38201

CVE-2022-38201 affects Esri Portal for ArcGIS Quick Capture Web Designer, specifically versions 10.8.1–10.9.1. The issue is an unvalidated redirect, where an attacker can lure an authenticated user to a domain controlled by the attacker, potentially enabling credential/session exposure or user in...

November 15, 2022—KB5019157 (OS Build 22000.1281) Preview

None None...

Esri Portal For ArcGIS 输入验证错误漏洞

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. An input validation error vulnerability exists in Esri Portal for ArcGIS Quick Capture...

CVE-2022-38201 An unvalidated redirect vulnerability exists in Esri ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1.

An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain...

WordPress Quick Restaurant Reservations plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by thiennv Patchstack Alliance in WordPress Quick Restaurant Reservations plugin versions = 1.5.4. Solution Update the WordPress Quick Restaurant Reservations plugin to the latest available version at least 1.5.5...