11833 matches found
CVE-2024-3013
The CVE-2024-3013 entry affects Teledyne FLIR AX8 (up to v1.46.16) in the User Registration component, specifically the /tools/test_login.php?action=register path. The root cause is an improper authorization vulnerability in an unknown function, allowing remote exploitation. Reports indicate the ...
CVE-2024-3013 Teledyne FLIR AX8 User Registration test_login.php improper authorization
A flaw has been found in Teledyne FLIR AX8 up to 1.46.16. The impacted element is an unknown function of the file /tools/testlogin.php?action=register of the component User Registration. Executing manipulation can lead to improper authorization. The attack may be performed from remote. The exploi...
CVE-2024-28456
Cross Site Scripting vulnerability in Campcodes Online Marriage Registration System v.1.0 allows a remote attacker to execute arbitrary code via the text fields in the marriage registration request form...
JetBrains TeamCity 安全漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A security vulnerability exists in JetBrains...
PT-2024-22442 · Unknown · Campcodes Online Marriage Registration System
Name of the Vulnerable Software and Affected Versions: Campcodes Online Marriage Registration System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the text fields in the marriage registration request form. This is a Cross Site Scripting vulnerability...
CVE-2024-28456
The vulnerability is a Cross Site Scripting (XSS) issue in Campcodes Online Marriage Registration System v1.0. A malicious user can supply crafted input in text fields of the marriage registration form to execute arbitrary code in the context of a victim’s browser. The Red Hat/NVD/CVE records con...
Online Marriage Registration System 安全漏洞
Online Marriage Registration System is a website builder that supports online marriage registration. A security vulnerability exists in Campcodes Online Marriage Registration System version v.1.0. A remote attacker can exploit this vulnerability to execute arbitrary code via text fields in the...
Workout Journal App 1.0 - Stored XSS
Exploit Title: Workout Journal App 1.0 - Stored XSS Date: 12.01.2024 Exploit Author: MURAT CAGRI ALIS Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/17088/workout-journal-app-using-php-and-mysql-source-code.html Version: 1.0 Tested on: Windows /...
PT-2024-23203 · Flir · Flir Ax8
Name of the Vulnerable Software and Affected Versions: FLIR AX8 versions up to 1.46.16 Description: A critical issue affects the User Registration component, specifically the file /tools/test login.php?action=register. The manipulation leads to improper authorization, and the attack may be...
PT-2024-2544 · Jetbrains · Jetbrains Teamcity +1
Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.03 Description: The issue is related to weaknesses in the authorization mechanism of JetBrains TeamCity, a continuous integration and deployment system. This weakness can be exploited by a remote...
CVE-2023-27459
Deserialization of Untrusted Data vulnerability in WPEverest User Registration.This issue affects User Registration: from n/a through 2.3.2.1...
CVE-2023-27459
Deserialization of Untrusted Data vulnerability in WPEverest User Registration.This issue affects User Registration: from n/a through 2.3.2.1...
CVE-2023-27459 WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in WPEverest User Registration.This issue affects User Registration: from n/a through 2.3.2.1...
CVE-2023-27459 WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in WPEverest User Registration.This issue affects User Registration: from n/a through 2.3.2.1...
CVE-2023-27459
CVE-2023-27459 describes a Deserialization of Untrusted Data vulnerability in the WordPress plugin WordPress User Registration (WPEverest/Masteriyo) for versions through 2.3.2.1. The vulnerability enables authenticated subscribers to achieve PHP Object Injection via untrusted data deserialization...
SUSE CVE-2021-47139
In the Linux kernel, the following vulnerability has been resolved: net: hns3: put off calling registernetdev until client initialize complete Currently, the netdevice is registered before client initializing complete. So there is a timewindow between netdevice available and usable. In this case,...
WordPress Plugin User Registration 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
PT-2024-12134 · Unknown · Wpeverest User Registration
Name of the Vulnerable Software and Affected Versions: WPEverest User Registration versions through 2.3.2.1 Description: The issue is related to Deserialization of Untrusted Data, which affects the user registration process. Recommendations: For versions through 2.3.2.1, update to a version later...
CVE-2021-47139
A flaw was found in the Linux Kernel's netdevice, which is registered before client initializing is complete. If a window of time between netdevice is available and usable, and a user tries to change the channel number or ring param, it may cause the hns3setrxcpurmap to be called twice...
CVE-2021-47139
In the Linux kernel, the following vulnerability has been resolved: net: hns3: put off calling registernetdev until client initialize complete Currently, the netdevice is registered before client initializing complete. So there is a timewindow between netdevice available and usable. In this case,...