8895 matches found
CVE-2023-49957
An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP Open Charge Point Protocol for electric vehicles. It permits multiple transactions with the same connectorId and idTag, contrary to the expected ConcurrentTx status. This could result in critical transaction management and billing...
PT-2023-31423 · Dalmann · Ocpp.Core
Name of the Vulnerable Software and Affected Versions: Dalmann OCPP.Core versions prior to 1.3.0 Description: An issue was discovered in Dalmann OCPP.Core for OCPP Open Charge Point Protocol for electric vehicles. It permits multiple transactions with the same connectorId and idTag, contrary to t...
Dalmann OCPP.Core Security Vulnerability
Dalmann OCPP.Core is an OCPP Open Charge Point Protocol server written in .NET 6 by Ulrich Personal Developer. A security vulnerability exists in Dalmann OCPP.Core versions prior to 1.3.0 that stems from the server allowing an attacker to conduct multiple transactions using the same connectorId a...
PT-2023-8960
Name of the Vulnerable Software and Affected Versions libheif version 1.17.5 Description The issue is related to a segmentation error in the find exif tag function of the libheif decoder and encoder for file formats. Exploitation of this issue could allow a remote attacker to impact the...
libheif Security Vulnerabilities
libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. A security vulnerability exists in libheif version v1.17.5, which stems from the discovery of a contained segmentation violation via the function findexiftag in /libheif/exif.cc...
CVE-2023-46353
In the module "Product Tag Icons Pro" ticons before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...
CVE-2023-46353
In the module "Product Tag Icons Pro" ticons before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...
CVE-2023-46353
In the module "Product Tag Icons Pro" ticons before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...
Sql injection
In the module "Product Tag Icons Pro" ticons before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...
Security Bulletin: Multiple vulnerabilities in go.etcd.io/etcd package affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data
Summary Multiple vulnerabilities in the go.etcd.io/etcd package affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data. These vulnerabilities are fixed. Vulnerability Details CVEID:CVE-2020-7919 DESCRIPTION: Go is vulnerable to a denial of service. By sending a malformed X.509...
PT-2023-29973 · Unknown · Prestashop +1
Name of the Vulnerable Software and Affected Versions: Product Tag Icons Pro versions prior to 1.8.4 Description: A guest can perform SQL injection in the module Product Tag Icons Pro for PrestaShop. The method TiconProduct::getTiconByProductAndTicon has sensitive SQL calls that can be executed...
CVE-2023-46353
CVE-2023-46353 (Product Tag Icons Pro, PrestaShop) Vulnerability exists in the module before 1.8.4 where a guest can induce a SQL injection via the TiconProduct::getTiconByProductAndTicon() function due to sensitive SQL calls that can be invoked with a trivial HTTP request. The issue affects the ...
GHSA-RQ2Q-HC6H-2PX2 Cross-Site Request Forgery in JFinalCMS via /admin/tag/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/save...
Cross-Site Request Forgery in JFinalCMS via /admin/tag/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/save...
GHSA-W492-7G9M-J2WW Cross-Site Request Forgery in JFinalCMS
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/delete...
GHSA-R6MG-FQ87-GW34 Cross-Site Request Forgery in JFinalCMS via /admin/tag/update
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/update...
Cross-Site Request Forgery in JFinalCMS via /admin/tag/update
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/update...
CVE-2023-49377
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/update...