WordPress Plugin Attorney Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2023-5729 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetWLanRadioSettings function when handling the GuardInt parameter. This allows attackers to cause a Denial of Service DoS via a crafted input...

WordPress Plugin SendPress Newsletters Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2023-29066 · Unknown · Mojoportal

Name of the Vulnerable Software and Affected Versions: mojoPortal version 2.7.0.0 Description: An issue in mojoPortal allows a remote attacker to execute arbitrary code via a crafted script to the layout.master skin file at the Skin management component. Recommendations: For mojoPortal version...

PT-2023-5728 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the CheckPasswdSettings function when handling the CurrentPassword parameter. This can be exploited by a remote attacker to cause a Denial of Servic...

PT-2023-31582

Name of the Vulnerable Software and Affected Versions Hospital management system version 378c157 Description The hospital management system is vulnerable to SQL injection SQLI, which allows attackers to bypass authentication. This issue is related to the application's susceptibility to SQLI...

CVE-2023-4565

Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may cause the hotspot feature to be unavailable...

WordPress plugin Arya Multipurpose cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin WordPress Ecommerce For Creating Fast Online Stores - By SureCart Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WordPress Ecommerce For...

PT-2023-15878 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a stability-related vulnerability in the binder background management and control module. Successful exploitation of this...

PT-2023-5373 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 Description: The issue is related to a stack overflow in the showMACfilterMAC function of the D-Link DIR-816 A2 router's firmware, which can be exploited via the flag 5G parameter. This could allow a remote...

PT-2023-28710 · Netis · Netis 360Rac1200

Name of the Vulnerable Software and Affected Versions: Netis 360RAC1200 version 1.3.4517 Description: The issue allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management. Recommendations: For...

The vulnerability of the Wireshark traffic analyzer lies in the execution of a loop with an unavailable exit condition, allowing a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause a service failure...

SHIRASAGI Security Vulnerabilities

SHIRASAGI is a content management system CMS for the Shirasagi project in Japan. A security vulnerability exists in SHIRASAGI. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

PT-2023-27046 · Unknown · Carts Guru

Name of the Vulnerable Software and Affected Versions: Carts Guru versions up to 2.4.2 Description: The issue is related to a SQL injection vulnerability. It affects the component CartsGuruCatalogModuleFrontController::display. Recommendations: For versions up to 2.4.2, consider restricting acces...

PT-2023-27042 · Unknown · Leotheme Leoblog

Name of the Vulnerable Software and Affected Versions: LeoTheme leoblog versions up to 3.1.2 Description: The issue is related to a SQL injection vulnerability. It affects the component LeoBlogBlog::getListBlogs. There is no information provided about the estimated number of potentially affected...

PT-2023-27733 · Webmin · Webmin

Name of the Vulnerable Software and Affected Versions: Webmin version 2.100 Description: A stored cross-site scripting XSS vulnerability in the Usermin Configuration function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom field...

PT-2023-27830 · Usermin +1 · Usermin +1

Name of the Vulnerable Software and Affected Versions: Webmin and Usermin version 2.000 Description: A Stored Cross-Site Scripting XSS issue exists in the mail forwarding and replies tab, allowing remote attackers to inject arbitrary web script or HTML via the forward to field while creating a ma...

CVE-2023-40308 Memory Corruption vulnerability in SAP CommonCryptoLib

SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any information...

Major cyberattack leaves MGM Resorts reeling

A major incident impacting MGM Resorts has caused computer shutdowns all over the US. The systems most impacted are tied to casinos and hotel computer systems. According to the AP, locations caught by this shutdown range from New York and Ohio to Michigan and Mississippi. At this point Id link to...