2942 matches found
CVE-2022-26564
HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting XSS vulnerability via the prezzoperiodo4 parameter in creaprezzi.php...
CVE-2022-26564
HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting XSS vulnerability via the prezzoperiodo4 parameter in creaprezzi.php...
Crypt-Server 跨站脚本漏洞
Crypt-Server is a Django web application by Graham Gilbert, an individual developer in the United States. It is used to host file library keys sent by the Crypt client application. A security vulnerability exists in Crypt-Server versions prior to 3.3.0, which stems from allowing the use of XSS in...
CVE-2022-1329
The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading malicious files...
CVE-2022-22189
An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration CSO allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects:...
Vulnerability fixed in Schneider Electric Modicon M340
Schneider Electric has fixed a vulnerability in the Modicon M340 controllers. An unauthenticated remote malicious person could potentially exploit the vulnerability to cause a denial-of-service cause in the controller's Ethernet interface by sending a specific SNMP request. Schneider Electric has...
CVE-2022-28329
A vulnerability has been identified in SCALANCE W1788-1 M12 All versions V3.0.0, SCALANCE W1788-2 EEC M12 All versions V3.0.0, SCALANCE W1788-2 M12 All versions V3.0.0, SCALANCE W1788-2IA M12 All versions V3.0.0. Affected devices do not properly handle malformed TCP packets received over the...
PT-2022-2609
Name of the Vulnerable Software and Affected Versions Ruby versions 2.6.0 through 2.6.9 Ruby versions 2.7.x through 2.7.5 Ruby versions 3.0.0 through 3.0.3 Ruby versions 3.1.0 through 3.1.1 Description The issue is related to a buffer over-read in Ruby, specifically in String-to-Float conversion,...
CVE-2022-1234
XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device...
CVE-2022-27441
A stored cross-site scripting XSS vulnerability in TPCMS v3.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Phone text box...
TPCMS 跨站脚本漏洞
TPCMS is a content management system.A cross-site scripting vulnerability exists in TPCMS version 3.2, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute arbitrary web script or HTML by injecting a...
TPCMS 日志信息泄露漏洞
TPCMS is an open source content management system from the individual developers at Source of Happiness. A security vulnerability exists in TPCMS version 3.2, which can be exploited by an attacker to access the ThinkPHP log directory and obtain sensitive information such as administrator username...
CVE-2022-0350
Cross-site Scripting XSS - Stored in GitHub repository vanessa219/vditor prior to 3.8.13...
CVE-2021-45031
A vulnerability in MEPSAN's USC+ before version 3.0 has a weakness in login function which lets attackers to generate high privileged accounts passwords...
Wyze Labs Wyze Cam 缓冲区错误漏洞
Wyze Labs Wyze Cam is a series of cameras from the US company Wyze Labs. Wyze Labs Wyze Cam has a security vulnerability that stems from a buffer overflow vulnerability in the presence of a stack. An attacker could exploit the vulnerability to run arbitrary code on the affected device. The...
Firmware Analysis and Comparison Tool 跨站请求伪造漏洞
Firmware Analysis and Comparison Tool FACT is a firmware analysis and comparison tool. firmware Analysis and Comparison Tool version v3.2 contains a cross-site request forgery vulnerability that stems from a WEB application that does not adequately validate that the request is from a trusted user...
CVE-2022-25521
NUUO v03.11.00 was discovered to contain access control issue...
CVE-2021-43666
A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...
jhead 缓冲区错误漏洞
jhead is a tool for modifying JPEG file information. A buffer error vulnerability exists in jhead version 3.04 and jpgfile.c version 3.05, which stems from a heap-based buffer overflow vulnerability in the RemoveUnknownSections function in jpgfile.c. The vulnerability is caused by a heap-based...