1481 matches found
WordPress plugin WordPress Online Booking and Scheduling Plugin SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
Node.js path traversal vulnerability
Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js version 20.x, which stems from a previously disclosed vulnerability CVE-2023-30584 that was inadequately patched...
Koha SQL Injection Vulnerability
Koha is a Koha organization's system for automated library management and site building. A security vulnerability exists in Koha Library Software version 23.0.5.04 and earlier that could allow a remote attacker to obtain sensitive information via Intranet/cgi bin/cataloging/ysearch.pl...
Koha Code Issue Vulnerability
Koha is a Koha organization's system for building websites for automated library management. A security vulnerability exists in Koha Library Software version 23.0.5.04 and earlier that could allow a remote attacker to read arbitrary files via the upload-cover-image.pl component...
October 10, 2023-KB5031009 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2
None None...
Reachfar GPS Log Information Disclosure Vulnerability
Reachfar GPS is a positioning module from Reachfar. A security vulnerability exists in Reachfar GPS version v28, which stems from the presence of an information disclosure vulnerability that could allow a remote attacker to retrieve sensitive information...
PT-2023-32138 · Unknown · Shenzhen Reachfar
Name of the Vulnerable Software and Affected Versions: Shenzhen Reachfar version v28 Description: The issue allows a remote attacker to retrieve all the week's logs stored in the 'log2' directory, potentially exposing sensitive information such as remembered wifi networks, sent messages, SOS devi...
CVE-2023-37605
Weak Exception Handling vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an attacker to cause a denial of service via a crafted request to the password parameter...
CVE-2023-32284
An out-of-bounds write vulnerability exists in the tiffplanaradobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...
Accusoft ImageGear Buffer Error Vulnerability
Accusoft ImageGear is a software development kit SDK for image processing from Accusoft Corporation. A buffer error vulnerability exists in Accusoft ImageGear version 20.1, which stems from a specially crafted, incorrectly formatted file that could lead to arbitrary code execution...
CVE-2023-4676
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yordam MedasPro allows Reflected XSS. This issue affects MedasPro: before 28...
CVE-2023-4676
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yordam MedasPro allows Reflected XSS.This issue affects MedasPro: before 28...
CVE-2023-37739
i-doit Pro v25 and below was discovered to be vulnerable to path traversal...
PT-2023-30190
Name of the Vulnerable Software and Affected Versions Yordam MedasPro versions prior to 28 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...
i-doit Path Traversal Vulnerability
i-doit is a configuration management database software from i-doit Inc. A security vulnerability exists in i-doit pro v25 and prior versions that stems from the presence of a path traversal vulnerability...
PaperCut NG Authorization Issues Vulnerability
PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. An authorization issue vulnerability exists in PaperCut NG versions 22.0.12 and earlier, which stems from a default that allows unauthenticated XMLRPC commands to be run...
Malicious code in chain-list (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe5c6ddc619ecf45531efce44ef718865eb6f689b196a3ea770934897790c4b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
NAVBLUE S.A.S N-Ops & Crew Cross-Site Scripting Vulnerability
NAVBLUE S.A.S N-Ops & Crew is an application from NAVBLUE Inc. designed to handle all aspects of network scheduling, operations control, personnel planning, personnel management and daily personnel scheduling from a single operation. A security vulnerability exists in NAVBLUE S.A.S N-Ops & Crew...
CWA for iOS: Cannot verify this server's certificate
Starting with Citrix Workspace App version 20.9, adding an account on the Workspace app gives an error "Cannot verify this server's certificate: . The server might not be secure. To continue access, tap Setup and check "Ignore certificate warning"...