668 matches found
Virtualsquare picoTCP 安全漏洞
Virtualsquare picoTCP is a free offshoot of PicoTCP from the Virtualsquare Personal Developer, originally distributed by Altran.be. A security vulnerability exists in Virtualsquare picoTCP version 2.1 and earlier versions, which stems from not setting the MSS lower bound...
Virtualsquare picoTCP 安全漏洞
Virtualsquare picoTCP is a free offshoot of PicoTCP from the Virtualsquare Personal Developer, originally distributed by Altran.be. A security vulnerability exists in VirtualSquare picoTCP version 2.1 and earlier versions that stems from the absence of certain calculations before attempting to se...
SUSE CVE-2023-3192
Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...
CVE-2023-1169
The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'fileuploadercallback' function in versions up to, and including, 2.1.4. This makes it possible for subscriber-level attackers to upload image attachments to the...
CVE-2023-23481
IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...
PrestaShop 路径遍历漏洞
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop tshirtecommerce 2.1.4 and earlier versions, which stems from the...
MP4v2 安全漏洞
MP4v2 is a library for creating, modifying, and reading MP4 files by the individual developer enzo1982. A security vulnerability exists in MP4v2 version v2.1.3, which stems from the discovery of a contained memory leak via the MP4StringProperty class in mp4property.cpp...
WordPress plugin WooCommerce Product Vendors 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
WordPress plugin LOGIN AND REGISTRATION ATTEMPTS LIMIT 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...
WordPress plugin Clock In Portal- Staff & Attendance Management 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
CVE-2023-29104
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1. The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an authenticated privileged remote attacke...
PT-2023-22155 · Siemens · Simatic Cloud Connect 7 Cc712 +1
Name of the Vulnerable Software and Affected Versions: SIMATIC Cloud Connect 7 CC712 versions 2.0 through 2.1 SIMATIC Cloud Connect 7 CC716 versions 2.0 through 2.1 Description: A vulnerability has been identified that could allow an unauthenticated remote attacker to gain access to additional...
PT-2023-22152 · Siemens · Simatic Cloud Connect 7 Cc712 +1
Name of the Vulnerable Software and Affected Versions: SIMATIC Cloud Connect 7 CC712 versions 2.0 through 2.1 SIMATIC Cloud Connect 7 CC716 versions 2.0 through 2.1 Description: A path traversal vulnerability has been identified in the upload feature of the web-based management of the affected...
Wordpress plugin Wholesale Suite 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. Wordpress plugin Wholesale Suite...
PT-2023-10015 · Unknown · Mail Subscribe List Plugin
Name of the Vulnerable Software and Affected Versions: Mail Subscribe List Plugin versions up to 2.0.10 Description: The issue affects some unknown processing of the file index.php. The manipulation of the argument sml name/sml email leads to cross site scripting. The attack may be initiated...
PYSEC-2023-36
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...
Dell Display Manager 安全漏洞
Dell Display Manager is a Windows application from Dell, Inc. It is used to manage a monitor or a group of monitors. A security vulnerability exists in Dell Display Manager version 2.1.0 and prior versions. An attacker could exploit this vulnerability to execute arbitrary code...
PYSEC-2023-34
Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0...
eXtplorer 安全漏洞
eXtplorer is a PHP-based file manager. A security vulnerability exists in eXtplorer version v.2.1.15, which stems from an insecure privilege vulnerability that can be exploited by remote attackers to execute arbitrary code via the index.php component...