open-mpi hwloc 代码问题漏洞

open-mpi hwloc is an open source tool library for obtaining hardware topology information and resource allocation in multi-core computer systems. A security vulnerability exists in open-mpi hwloc version 2.1.0, which originated from allowing an attacker to cause a denial of service DoS via the...

CVE-2023-33373

Connected IO v2.1.0 and prior keeps passwords and credentials in clear-text format, allowing attackers to exfiltrate the credentials and use them to impersonate the devices...

CVE-2023-34369

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in GrandSlambert Login Configurator plugin = 2.1 versions...

WordPress plugin Login Configurator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Icewarp Icearp 跨站脚本漏洞

Icewarp Icearp is an email, messaging and collaboration service for small, medium and enterprise-level businesses from the Czech company Icewarp. A cross-site scripting vulnerability exists in Icewarp Icearp version 10.2.1, which stems from the presence of a cross-site scripting XSS vulnerability...

CVE-2023-37973

Cross-Site Request Forgery CSRF vulnerability in David Pokorny Replace Word plugin = 2.1 versions...

Bylancer QuickVCard SQL注入漏洞

Bylancer QuickVCard is a Digital Business Card SaaS PHP script from Bylancer. A SQL injection vulnerability exists in Bylancer QuickVCard version 2.1, which stems from some unknown handling of the file /blog in the component GET Parameter Handler, which leads to an sql injection via the parameter...

PT-2023-25731 · Bylancer · Bylancer Quickvcard

Name of the Vulnerable Software and Affected Versions: Bylancer QuickVCard version 2.1 Description: A critical issue affects the processing of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack may be initiated remotely. Th...

CVE-2023-36375

Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name, Guardian relation, complimentary address, city, permanent address, and city parameters in the Book Hostel & Room Details page...

CVE-2023-3045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tise Technology Parking Web Report allows SQL Injection. This issue affects Parking Web Report: before 2.1...

PT-2023-25744 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hostel Management System version 2.1 Description: The issue allows an attacker to execute arbitrary code via a crafted payload to the search booking field. This is a Cross-Site Scripting XSS issue. Recommendations: For Hostel Management Syste...

DuxCMS 路径遍历漏洞

DuxCMS is an open source content management system. A security vulnerability exists in DuxCMS version 2.1, which stems from a directory traversal vulnerability that allows an attacker to delete arbitrary files via /admin/AdminBackup/del...

CVE-2023-0588

The Catalyst Connect Zoho CRM Client Portal WordPress plugin before 2.1.0 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admin...

Virtualsquare picoTCP 安全漏洞

Virtualsquare picoTCP is a free offshoot of PicoTCP from the Virtualsquare Personal Developer, originally distributed by Altran.be. A security vulnerability exists in Virtualsquare picoTCP version 2.1 and earlier versions, which stems from not setting the MSS lower bound...

Virtualsquare picoTCP 安全漏洞

Virtualsquare picoTCP is a free offshoot of PicoTCP from the Virtualsquare Personal Developer, originally distributed by Altran.be. A security vulnerability exists in VirtualSquare picoTCP version 2.1 and earlier versions that stems from the absence of certain calculations before attempting to se...

PT-2023-25339 · Virtualsquare · Picotcp

Name of the Vulnerable Software and Affected Versions: VirtualSquare picoTCP aka PicoTCP-NG versions 2.1 and earlier Description: The issue arises from the failure to check the transport layer length in a frame before performing port filtering. This can lead to potential security risks...

SUSE CVE-2023-3192

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-1169

The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'fileuploadercallback' function in versions up to, and including, 2.1.4. This makes it possible for subscriber-level attackers to upload image attachments to the...

CVE-2023-23481

IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...

MP4v2 安全漏洞

MP4v2 is a library for creating, modifying, and reading MP4 files by the individual developer enzo1982. A security vulnerability exists in MP4v2 version v2.1.3, which stems from the discovery of a contained memory leak via the MP4StringProperty class in mp4property.cpp...