3038 matches found
CVE-2021-26736
Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges...
Zscaler Client Connector Access Control Error Vulnerability
Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...
PT-2023-30043 · WordPress · Wp Customer Reviews
Name of the Vulnerable Software and Affected Versions: WP Customer Reviews plugin for WordPress versions up to, and including, 3.6.6 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows...
Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access
...
CVE-2023-4950
The Interactive Contact Form and Multi Step Form Builder WordPress plugin before 3.4 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks...
CVE-2023-45748
Cross-Site Request Forgery CSRF vulnerability in MailMunch MailChimp Forms by MailMunch plugin = 3.1.4 versions...
CVE-2023-45396
An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...
CVE-2023-36126
There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Appointment Scheduler v3.0...
CVE-2020-27630
In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random...
PT-2023-5873 · Libcue +6 · Libcue +6
Name of the Vulnerable Software and Affected Versions: libcue versions 2.2.1 and prior Description: The issue is related to out-of-bounds array access in libcue, which provides an API for parsing and extracting data from CUE sheets. A user of the GNOME desktop environment can be exploited by...
DEBIAN-CVE-2023-43615
Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow...
GDidees CMS Cross-Site Scripting Vulnerability
GDidees CMS is a website builder from GDidees. A security vulnerability exists in GDidees CMS version 3.0, which stems from the presence of a cross-site scripting XSS vulnerability...
CVE-2023-44075
Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter...
Chat Server Buffer Error Vulnerability
Chat Server is ramank775 individual developer's chat server based on microservices architecture that supports high availability, high throughput, and horizontal scaling. A buffer error vulnerability exists in Easy Chat Server version 3.1, which stems from the presence of a buffer overflow...
Chat Server Cross-Site Scripting Vulnerability
Chat Server is ramank775 individual developer's chat server based on microservices architecture, supporting high availability, high throughput, horizontal scaling. A cross-site scripting vulnerability exists in Chat Server version 3.1, which stems from a stored cross-site scripting XSS...
CVE-2023-43835
Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content...
PT-2023-29007 · Unknown · Super Store Finder
Name of the Vulnerable Software and Affected Versions: Super Store Finder versions 3.7 and below Description: The issue allows for authenticated Arbitrary PHP Code Injection, potentially leading to Remote Code Execution when settings overwrite config.inc.php content. Recommendations: For Super...
CVE-2023-44044
Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php...
SUSE-SU-2023:3778-1 Security update for wireshark
This update for wireshark fixes the following issues: - Wireshark update to v3.6.16. - CVE-2023-4512: Fixed a bug in CBOR dissector which could lead to crash. bsc1214561 - CVE-2023-4511: Fixed a bug in BT SDP dissector which could lead to an infinite loop. bsc1214560 - CVE-2023-4513: Fixed a bug ...