The vulnerability of the LearnPress plugin of the WordPress content management system allows a hacker to carry out XSS attacks.

The vulnerability of the LearnPress plugin for WordPress content management systems exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of Moxa PT-G503 Ethernet switches’ microprogramming software lies in the use of cookies to store confidential information without the HttpOnly flag. This allows attackers to gain unauthorized access to the protected information.

The vulnerability of Moxa PT-G503 Ethernet switches’ microprogramming software is related to the use of cookies for storing confidential information without the HttpOnly flag. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

kernel: Rate limit overflow messages in r8152 in intr_callback

A vulnerability was found in intrcallback in drivers/net/usb/r8152.c in the BPF component in the Linux Kernel. The manipulation leads to logging excessive data, where an attack can be launched remotely...

The vulnerability of the `apply_relocations` function in the `binutils/readelf.c` component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the applyrelocations function in the binutils/readelf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure through the use of a specially create...

The vulnerability of the /bfd/pef.c component of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the /bfd/pef.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure through the use of a specially created file...

The vulnerability of the _bfd_elf_slurp_version_tables function in the elf.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the bfdelfslurpversiontables function in the elf.c component of the GNU Binutils development environment is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF file...

PT-2023-8376 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM version 7.5.0 Description: The issue is related to a lack of protection for the web page structure in the IBM QRadar SIEM system, allowing a remote attacker to bypass restrictions on executing JavaScript. This can lead to the...

SLiMS 9 Bulian Security Vulnerability

SLiMS 9 Bulian is a free and open source software from the SLiMS community in Indonesia. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A security vulnerability exists in SLiMS 9 Bulian version v.9.6.1, which stems fr...

PT-2023-30036 · Unknown · Juzawebcms

Name of the Vulnerable Software and Affected Versions: juzawebCMS versions 3.4 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page. This is a Cross Site Scripting vulnerability...

D-Link DAR-7000 SQL Injection Vulnerability

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. The D-Link DAR-7000 V31R02B1413C suffers from a SQL injection vulnerability, which can be exploited by a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component...

Dromara Sa-Token Security Breach

Sa-Token is a lightweight Java permissions authentication framework open-sourced by dromara. Dromara Sa-Token 1.36.0 and earlier versions have a security vulnerability , the vulnerability stems from allowing remote attackers to escalate privileges through a carefully designed load...

PT-2023-29297 · Dromara +1 · Dromara Satoken +1

Name of the Vulnerable Software and Affected Versions: Dromara SaToken versions 1.36.0 and earlier IBM Sterling Connect Direct Web Services versions 6.0, 6.1.0, 6.2.0, 6.3.0 IBM Sterling Connect Direct Web Services Certified Container versions All Description: An issue allows a remote attacker to...

The vulnerability in the web interface of the Copyparty file server allows a attacker to perform XSS attacks.

The vulnerability in the web interface of the Copyparty file server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Contact Form Generator plugin, which is designed for creating contact forms on WordPress websites, allows a hacker to perform XSS attacks.

The vulnerability of the Contact Form Generator plugin, which is designed for creating contact forms on WordPress websites, exists due to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotel...

The vulnerability of the Microsoft Visual Studio software lies in the use of a name with an incorrect reference. This allows attackers to write arbitrary files into the system.

The vulnerability of the Microsoft Visual Studio software relates to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor to write arbitrary files into the system remotely...

Samba 4.16.0 < 4.17.12, 4.18.0 < 4.18.8, 4.19.0 Multiple Vulnerabilities

Samba is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba"; ifdescription...

The vulnerability of the SetDeviceSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetDeviceSettings function in D-Link DIR-3040 wireless router microprogramming software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted...

The vulnerability of the OpenIdAuthenticator class in Eclipse Jetty servers allows a hacker to bypass security restrictions.

The vulnerability of the OpenIdAuthenticator class in Eclipse Jetty servers is related to deficiencies in the authentication process when processing the LoginService parameter. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

CVE-2023-5301

A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file albumadd.php. The manipulation of the argument albumUploadFiles leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2023-5296

A vulnerability was found in Xinhu RockOA 1.1/2.3.2/15.X3amdi and classified as problematic. Affected by this issue is some unknown functionality of the file api.php?m=reimplat&a=index of the component Password Handler. The manipulation leads to weak password recovery. The attack may be launched...