5458 matches found
CVE-2022-2171
The Progressive License WordPress plugin through 1.1.0 is lacking any CSRF check when saving its settings, which could allow attackers to make a logged in admin change them. Furthermore, as the plugin allows arbitrary HTML to be inserted in one of the settings, this could lead to Stored XSS issue...
WordPress plugin Progressive License 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
The vulnerability of the Xbox Live Save Service on Windows operating systems allows a hacker to bypass system security restrictions and increase their privileges.
The vulnerability of the Xbox Live Save Service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a hacker to bypass system security restrictions and enhance their privileges...
CVE-2020-23561
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x0000000000005722...
CVE-2020-23563
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x0000000000002cba...
CVE-2022-32318
Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via the component /ffos/classes/Master.php?f=savecategory...
CVE-2022-32318
Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via the component /ffos/classes/Master.php?f=savecategory...
CVE-2022-33644
Xbox Live Save Service Elevation of Privilege Vulnerability...
CVE-2022-33644
Xbox Live Save Service Elevation of Privilege Vulnerability...
CVE-2022-33644
Xbox Live Save Service Elevation of Privilege Vulnerability...
CVE-2022-33644 Xbox Live Save Service Elevation of Privilege Vulnerability
...
CVE-2022-33644
CVE-2022-33644 affects Xbox Live Save Service and is an Elevation of Privilege on Windows/Xbox components. Connected data confirms the vulnerability type (privilege escalation) and relates it to Windows/Xbox Live Save Service. Public exploits exist for this CVE, and remediation is provided by Mic...
CVE-2022-33644 Xbox Live Save Service Elevation of Privilege Vulnerability
...
Xbox Live Save Service Elevation of Privilege Vulnerability
...
PT-2022-3793 · Microsoft · Xbox Live Save Service +1
Name of the Vulnerable Software and Affected Versions: Xbox Live Save Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Xbox Live Save Service, which can be exploited to bypass system security restrictions and elevate privileges...
CVE-2022-33644: Undefined Security Weakness
Xbox Live Save Service Elevation of Privilege Vulnerability...
PT-2022-6290 · WordPress · Wicked Folders
Name of the Vulnerable Software and Affected Versions: Wicked Folders plugin for WordPress versions up to, and including, 2.18.16 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ajax save state function. This allows unauthenticat...
CVE-2022-29096
Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in saveGroupConfigurations page. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser ...
CVE-2022-30118
Title for CVE: XSS in /dashboard/system/express/entities/forms/savecontrol/GUID: old browsers only.Description: When using Internet Explorer with the XSS protection disabled, editing a form control in an express entities form for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 can...
