257 matches found
CVE-2023-24282: Improper Neutralization of Input During Web Page Generation
An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin = 2.3.1 leading to activation/deactivation of plugin rulesets...
CVE-2022-46805 WordPress Conditional Payments for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin = 2.3.1 leading to activation/deactivation of plugin rulesets...
CVE-2022-46805
The CVE-2022-46805 entry documents a CSRF vulnerability in the WP Trio Conditional Shipping for WooCommerce plugin (versions ≤ 2.3.1). The flaw enables activation/deactivation of plugin rulesets via CSRF. Public sources identify the affected software as WordPress Conditional Payments for WooComme...
CVE-2022-46805: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin = 2.3.1 leading to activation/deactivation of plugin rulesets...
CVE-2022-46815
Cross-Site Request Forgery CSRF vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin = 2.3.1 versions...
CVE-2022-46815
The CVE-2022-46815 entry concerns the WordPress WP Trio Conditional Shipping for WooCommerce plugin (versions
PT-2023-15058 · WordPress · Wp Trio Conditional Shipping For Woocommerce
Name of the Vulnerable Software and Affected Versions: Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin versions prior to 2.3.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user...
CVE-2022-46815: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin = 2.3.1 versions...
PT-2022-4660 · Zyxel · Zyxel Nas326 +2
Name of the Vulnerable Software and Affected Versions: Zyxel NAS326 firmware versions prior to V5.21AAZF.12C0 Zyxel NAS540 firmware versions prior to V5.21AAZF.12C0 Zyxel NAS542 firmware versions prior to V5.21AAZF.12C0 Description: A format string vulnerability could allow an attacker to achieve...
trio-cloud.com Cross Site Scripting vulnerability OBB-2663278
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
trio-daszentrum.ch Cross Site Scripting vulnerability OBB-2435156
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Polycom Trio Remote Code Execution Vulnerability
The Polycom Trio is a Trio series of business conference phones from Polycom USA. A remote code execution vulnerability exists in Polycom Trio, which can be exploited by an attacker to execute commands via unspecified vectors...
CVE-2018-17875
A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...
CVE-2018-17875
A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...
CVE-2018-17875
Poly Trio 8800 devices running 5.7.1.4145 are affected by CVE-2018-17875, a remote code execution vulnerability in the ping command that allows remote authenticated users to execute commands via unspecified vectors. Impact is high for unauthenticated? No, authenticated users per description; CVSS...
PT-2021-8828
Name of the Vulnerable Software and Affected Versions Poly Trio 8800 version 5.7.1.4145 Description A remote code execution issue in the ping command allows remote authenticated users to execute commands via unspecified vectors. Recommendations For Poly Trio 8800 version 5.7.1.4145, consider...
CVE-2018-17875: Undefined Security Weakness
A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...
Polycom Trio 安全漏洞
The Polycom Trio is a Trio series of business conference phones from Polycom USA. A remote code execution vulnerability exists in Polycom Trio, which can be exploited by an attacker to execute commands via unspecified vectors...
Design/Logic Flaw
A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs Modular Port Concentrators may cause FPC to crash and lead to a Denial of Service DoS condition. Continued receipt of this packet will sustain the...