4682 matches found
CVE-2024-13279
Session Fixation vulnerability in Drupal Two-factor Authentication TFA allows Session Fixation.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.8.0...
CVE-2024-13244
CVE-2024-13244 concerns Drupal Migrate Tools, a Drupal module for migrations. Multiple sources confirm a Cross-Site Request Forgery (CSRF) vulnerability in Migrate Tools, affecting versions 0.0.0 through 6.0.2 (vulnerability before 6.0.3). The underlying issue allows an authenticated administrato...
Drupal 安全漏洞
Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal prior to version 2.0.2, which stems from the inclusion of a missing authorization vulnerability...
PT-2025-4446 · Unknown · Cf7Save Extension
Name of the Vulnerable Software and Affected Versions: Cf7Save Extension versions prior to 1 Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicious scripts into w...
WeGIA 代码问题漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A code issue vulnerability exists in WeGIA versions prior to 3.2.6, which stems from a cross-site scripting vulnerability in the file upload functionality that could allow an attacker to execute arbitrary...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 134, which stems from the presence of a memory security flaw...
WordPress Sominx theme < 1.2.6 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme Sominx - Creative Business Agency WordPress Theme versions 1.2.6...
WordPress TheFude theme < 1.3.8 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme TheFude - Crowdfunding & Charity WordPress Theme versions 1.3.8...
Optimizely EPiServer.CMS.Core 安全漏洞
Optimizely EPiServer.CMS.Core is a content management system core from Optimizely, Inc. A security vulnerability exists in Optimizely EPiServer.CMS.Core versions prior to 12.32.0 that stems from insufficient complexity of the required password...
Karmada 路径遍历漏洞
Karmada is a Kubernete management system open-sourced by Karmada. A path traversal vulnerability exists in versions of Karmada prior to 1.12.0, which stems from allowing users to run cloud-native applications across multiple Kubernetes clusters and clouds...
AZL-55628 CVE-2024-56629 affecting package kernel for versions less than 6.6.76.1-1
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix when get product name maybe null pointer Due to incorrect dev-product reporting by certain devices, null pointer dereferences occur when dev-product is empty, leading to potential system crashes. This issue was...
PT-2024-36803 · Lgsl · Lgsl
Name of the Vulnerable Software and Affected Versions: LGSL versions prior to 7.0.0 Description: A stored cross-site scripting XSS vulnerability was identified in LGSL. The issue arises from improper sanitation of user input. The function lgsl query 40 in lgsl protocol.php has implemented an HTTP...
PT-2024-16597 · WordPress · Jetpack
Name of the Vulnerable Software and Affected Versions: Jetpack WordPress plugin versions prior to 14.1 Description: The issue is related to the Jetpack WordPress plugin not properly checking the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-XSS. The proble...
DEBIAN-CVE-2024-56201
Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox is used. To exploit the vulnerability...
Grist 跨站脚本漏洞
Grist is a modern relational spreadsheet open-sourced by Grist. A cross-site scripting vulnerability exists in Grist versions prior to 1.3.2, which stems from a JavaScript in an SVG file that can be executed in the context of the user's current page, thereby compromising the account of a user who...
CVE-2024-10244
CVE-2024-10244 affects ISDO Software Web Software. The issue is an SQL Injection caused by improper neutralization of special elements in the web app, exploitable remotely (NETWORK) with no user interaction. Affected versions are Web Software prior to 3.6. Impact per metrics is high/critical (C/H...
CVE-2024-10244 SQLi in ISDO Software's Web Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ISDO Software Web Software allows SQL Injection. This issue affects Web Software: before 3.6...
PT-2024-40967 · Libafl · Libafl
Name of the Vulnerable Software and Affected Versions: LibAFL versions prior to 0.11.2 Description: The issue arises from the misuse of the slice::from raw parts mut API, where a pointer is misaligned due to a direct cast from u8 to u16 raw pointer, leading to unsound behavior. The problem is...