10322 matches found
CVE-2025-22503
CVE-2025-22503 describes a Cross-Site Request Forgery in the WordPress plugin/feature named "Admin debug wordpress – enable debug". Affected versions are listed as up to 1.0.13 (from n/a through 1.0.13). The Wordfence Intelligence entry indicates this vulnerability remains Unpatched for Admin deb...
CVE-2025-22503 WordPress Admin debug wordpress – enable debug Plugin <= 1.0.13 - Cross Site Request Forgery vulnerability
Cross-Site Request Forgery CSRF vulnerability in digitalzoomstudio Admin debug wordpress – enable debug dzs-enable-debug allows Cross Site Request Forgery.This issue affects Admin debug wordpress – enable debug: from n/a through = 1.0.13...
BG.Studio Color Phone Call Screen App 安全漏洞
BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen app from BG.Studio. A security vulnerability exists in the BG.Studio Color Phone Call Screen App Android24 version that originates from allowing any application to send a crafted call via the...
BG.Studio Color Phone Call Screen App 安全漏洞
BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen application from BG.Studio, Inc. A security vulnerability exists in BG.Studio Color Phone Call Screen App version 1.1.2 and earlier, which stems from a vulnerability that allows any application ...
BG.Studio Color Phone Call Screen App 安全漏洞
BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen application from BG.Studio, Inc. A security vulnerability exists in BG.Studio Color Phone Call Screen App version 21.1.9 and earlier, which stems from a vulnerability that allows any application...
Galaxy studio apps iCall OS17 Color Phone Flash 安全漏洞
Galaxy studio apps iCall OS17 Color Phone Flash is a default dialer application from Galaxy studio apps, Inc. A security vulnerability exists in Galaxy studio apps iCall OS17 Color Phone Flash version 4.3 and earlier, which originates from a crafted intent that can be sent via the...
CVE-2024-56028
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lemonadestudio Lemonade Social Networks Autoposter Pinterest lemonade-sna-pinterest-edition allows Reflected XSS.This issue affects Lemonade Social Networks Autoposter Pinterest: from n/a through =...
CVE-2024-56028 WordPress Lemonade Social Networks Autoposter Pinterest plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lemonadestudio Lemonade Social Networks Autoposter Pinterest lemonade-sna-pinterest-edition allows Reflected XSS.This issue affects Lemonade Social Networks Autoposter Pinterest: from n/a through =...
CVE-2024-56028
CVE-2024-56028 is a Reflected XSS in the Lemonade Social Networks Autoposter Pinterest WordPress plugin. Affected: Lemonade SNA Pinterest edition up to version 2.0 (from n/a through 2.0). Root cause: improper neutralization of input during web page generation. Impact: allows attacker to inject sc...
ABB Cylon Aspect 3.08.03 webServerDeviceLabelUpdate.php Denial of Service Vulnerability
ABB Cylon Aspect version 3.08.03 suffers from an authenticated arbitrary content injection vulnerability in the webServerDeviceLabelUpdate.php script due to a lack of input validation. Authenticated attackers can exploit the deviceLabel POST parameter to write arbitrary content to a fixed file...
CVE-2024-56231
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio SaasPricing saaspricing allows DOM-Based XSS.This issue affects SaasPricing: from n/a through = 1.2.4...
CVE-2024-56231
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio SaasPricing allows DOM-Based XSS.This issue affects SaasPricing: from n/a through 1.1.4...
CVE-2024-56231 WordPress SaasPricing plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio SaasPricing allows DOM-Based XSS.This issue affects SaasPricing: from n/a through 1.1.4...
CVE-2024-56231
CVE-2024-56231 affects the SaasPricing WordPress plugin. Connected sources describe an authenticated Stored Cross-Site Scripting (Contributor+ level) in SaasPricing
PT-2024-36767 · Unknown · Debuggers Studio Saaspricing
Name of the Vulnerable Software and Affected Versions: Debuggers Studio SaasPricing versions 1.1.4 and earlier Description: The issue affects Debuggers Studio SaasPricing, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This enables Cross-site Scripting...
The vulnerability of the Microsoft Visual Studio software and the Microsoft.NET platform allows attackers to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio software and the Microsoft.NET platform is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of Intel NUC Software Studio Service’s software for the Windows operating system, related to access control errors, allows attackers to escalate their privileges.
The vulnerability of Intel NUC Software Studio Service’s operating system for Windows is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of Intel NUC Software Studio Service’s software for the Windows operating system, related to access control errors, allows attackers to escalate their privileges.
The vulnerability of Intel NUC Software Studio Service for the Windows operating system is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...