520 matches found
PT-2023-30207 · Unknown · Thefreewindows Auto Limit Posts Reloaded
Name of the Vulnerable Software and Affected Versions: TheFreeWindows Auto Limit Posts Reloaded plugin versions = 2.5 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations...
CVE-2023-46151
Cross-Site Request Forgery CSRF vulnerability in AWESOME TOGI Product Category Tree plugin = 2.5 versions...
CVE-2023-40829
There is an interface unauthorized access vulnerability in the background of Tencent Enterprise Wechat Privatization 2.5.x and 2.6.930000...
Delta Electronics WPLSoft Security Vulnerability
Delta Electronics WPLSoft is a software tool for programming Delta Programmable Logic Controllers PLCs from Delta Electronics, Inc. of Taiwan, China. A security vulnerability exists in Delta Electronics WPLSoft version 2.51, which originates from the transmission of sensitive information in clear...
PT-2023-5870 · Delta Electronics · Wplsoft
Name of the Vulnerable Software and Affected Versions: Delta Electronics WPLSoft versions up to 2.51 Description: A heap-based buffer overflow issue affects the Modbus Data Packet Handler component in Delta Electronics WPLSoft. This issue can be exploited by a remote attacker to cause a denial of...
CVE-2023-41728
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through 2.5...
PT-2023-28067 · Unknown · Rescue Shortcodes
Name of the Vulnerable Software and Affected Versions: Rescue Shortcodes versions through 2.5 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious script...
CVE-2023-25471
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...
SUSE CVE-2020-18652
Buffer Overflow vulnerability in WEBPSupport.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file...
AZL-43711 CVE-2020-35357 affecting package gsl 2.6-3
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL GNU Scientific Library, versions 2.5 and 2.6. Processing a maliciously crafted input data for gslstatsquantilefromsorteddata of the library may lead to unexpected application termination or arbitra...
PT-2023-27371 · Gnu +2 · Gnu Inetutils +2
Name of the Vulnerable Software and Affected Versions: GNU inetutils versions prior to 2.5 Description: The issue allows privilege escalation due to unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is relevant if the setuid system call fails when ...
CVE-2023-24391
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Spider Teams ApplyOnline plugin = 2.5 versions...
WordPress plugin Custom Field Template cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-37976
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Radio Forge Muses Player with Skins plugin = 2.5 versions...
PaddlePaddle 资源管理错误漏洞
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. A security vulnerability exists in PaddlePaddle versions prior to 2.5.0, which stems from a Use after free vulnerability. An attacker could use this vulnerability to perform unauthorized operations or...
PaddlePaddle 代码问题漏洞
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle version 2.5.0 before there is a security vulnerability , the vulnerability stems from the PaddlePaddle paddle.flip function in the existence of a null pointer dereference Null pointer...
PT-2023-26543 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue is a null pointer dereference in the paddle.flip function, which results in a runtime crash and denial of service. Recommendations: For versions prior to 2.5.0, update to version 2.5...
WordPress Plugin Jupiter X Core 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exis...
PT-2023-26157 · Activeitzone · Active Super Shop Cms
Name of the Vulnerable Software and Affected Versions: ActiveITzone Active Super Shop CMS version 2.5 Description: A problematic issue has been found in the Manage Details Page component, where the manipulation of the name, phone, or address arguments leads to cross-site scripting. The attack can...