8476 matches found
CVE-2023-24381
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in NsThemes Advanced Social Pixel plugin = 2.1.1 versions...
PT-2023-17020 · Unknown · Xiaobingby Teacms
Name of the Vulnerable Software and Affected Versions: XiaoBingBy TeaCMS versions up to 2.0.2 Description: A critical vulnerability has been found in XiaoBingBy TeaCMS, affecting the file /admin/getallarticleinfo. The manipulation of the searchInfo argument leads to sql injection. The attack can ...
CVE-2023-1432
A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=savesettings of the component POST Request Handler. The manipulation leads to improper access control...
Online Food Ordering System 访问控制错误漏洞
Online Food Ordering System is an online food ordering system by Carlo Montero, an individual developer. An access control error vulnerability exists in SourceCodester Online Food Ordering System version 2.0, which stems from the presence of an unknown function in the file...
PT-2023-16979 · Sourcecodester · Sourcecodester Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file "/fos/admin/ajax.php?action=save settings" of the component POST Request Handler...
golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests
A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache...
golang: net/http: handle server errors after sending GOAWAY
A flaw was found in the golang package. In net/http in Go, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if a fatal error preempts the shutdown...
dnsmasq 安全漏洞
dnsmasq is a lightweight DNS forwarding and DHCP and TFTP server written in C. It can be used to forward packets to and from the server. A security vulnerability exists in dnsmasq versions prior to 2.90, which stems from the EDNS.0 UDP packet size being set to 4096 when the actual size should be...
PT-2023-21019 · Jizhicms · Jizhicms
Name of the Vulnerable Software and Affected Versions: Jizhicms version 2.4.5 Description: An arbitrary file upload vulnerability in the CommonController.php component allows attackers to execute arbitrary code via a crafted phtml file. This issue is related to the admincCommonController.php...
DEBIAN-CVE-2023-27585
PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...
ALPINE-CVE-2023-27585
PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...
WordPress Plugin WP CSV to Database 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2022-47166
Cross-Site Request Forgery CSRF vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder plugin = 2.1.1 versions...
bumsys SQL注入漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. unilogies bumsys version before v2.0.2 has a SQL injection vulnerability , the vulnerability stems from core/ajax/ajaxdata.php in the SQL injection...
WordPress plugin Void Contact Form 7 Widget For Elementor Page Builder 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
bumsys 安全漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. A security vulnerability exists in unilogies bumsys versions prior to v2.0.2, which stems from an improper restriction in the UI layer or framework in which the software is rendered...
Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
...
SUSE CVE-2019-14692
AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load in mkj.cpp...