CVE-2023-40435

This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials...

CVE-2023-40435

This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials...

Sql injection

Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php...

Apple Xcode Security Vulnerability

Apple Xcode is a set of integrated development environments provided to developers by Apple Inc. in the United States, which is primarily used to develop applications for Mac OS X and iOS. A security vulnerability exists in Apple Xcode 15, which stems from the fact that applications may be able t...

Super Store Finder SQL Injection Vulnerability

Super Store Finder is an easy-to-use Google Maps API store finder program Super Store Finder by Super Store Finder. A SQL injection vulnerability exists in Super Store Finder v3.6 and earlier versions, which stems from the Search parameter in /admin/stores.php containing an SQL injection...

CVE-2023-40435

This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials...

CVE-2023-40435

This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials...

CVE-2023-44044

Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php...

CVE-2023-44044

Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php...

PT-2023-29081

Name of the Vulnerable Software and Affected Versions Super Store Finder versions 3.6 and below Description The issue is related to a SQL injection vulnerability. It can be exploited via the Search parameter at the "/admin/stores.php" API endpoint. Recommendations For Super Store Finder versions...

CVE-2023-44044: Improper Neutralization of Special Elements used in an SQL Command

Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php...

CVE-2023-40435: Undefined Security Weakness

This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials...

About the security content of macOS Sonoma 14

About the security content of macOS Sonoma 14 This document describes the security content of macOS Sonoma 14. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CVE-2023-44044

Affected product: Super Store Finder v3.6 and below. Vulnerability: SQL injection via the Search parameter in /admin/stores.php. Root cause / detail: As disclosed, the vulnerability allows injection through the Search input, enabling potentially unauthorized data access or modification. Impact (a...

CVE-2023-4476

The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-4476

The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-4476 Locatoraid Store Locator < 3.9.24 - Reflected XSS

The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-4476 Locatoraid Store Locator < 3.9.24 - Reflected XSS

The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-4476

The CVE-2023-4476 entry concerns the Locatoraid Store Locator WordPress plugin, affected version prior to 3.9.24. The vulnerability is a Reflected Cross-Site Scripting caused by improper sanitisation/escaping of the lpr-search parameter when it is output back to the page. This could allow an atta...

asyncio-gevent (0.2.1), bgpfu (>=0.2.0, <=0.3.0) +82 more potentially affected by CVE-2023-41419 via gevent (21.12.0)

gevent PYPI version 21.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gevent and may be impacted: - asyncio-gevent 0.2.1 - bgpfu =0.2.0, =1.0.0, =0.0.1, =0.0.2a0, =0.1.10, =0.7.2, =0.1.0, =0.5.0, =0.0.1, =0.0.10, =3.23.1, =3.24.1 and more Source...