CVE-2023-50854

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly Squirrly SEO - Advanced Pack.This issue affects Squirrly SEO - Advanced Pack: from n/a before 2.4.02...

CVE-2023-50851

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in N Squared Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin.This issue affects Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin: from n/a before...

CVE-2023-4671

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection. This issue affects ECOP: before 32255...

PT-2023-23846 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions prior to 2.25.3 Description: The issue is related to the deserialization of untrusted data. This problem can be exploited in GiveWP – Donation Plugin and Fundraising Platform. There i...

WordPress plugin WP Mail Log security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability in the...

PT-2023-31348 · Growi · Growi

Name of the Vulnerable Software and Affected Versions: GROWI versions prior to v6.0.0 Description: A stored cross-site scripting issue exists in the anchor tag of GROWI. If exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product...

PT-2023-32234 · WordPress · Wp Mail Log

Name of the Vulnerable Software and Affected Versions: WP Mail Log WordPress plugin versions prior to 1.1.3 Description: The issue arises from the WP Mail Log WordPress plugin not properly sanitizing and escaping a parameter before using it in a SQL statement, leading to a SQL injection. This can...

CVE-2023-37187

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfpaccdecompress. function...

Sysaid Technologies SysAid Security Vulnerabilities

Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel SysAid On-Premise is a local installation version of SysAid. A security vulnerability exists in Sysaid Technologies SysAid On-Premise versions prior to 23.3.34. An attacker could exploit the...

VulnCheck KEV: CVE-2021-29203

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary...

Gradio Path Traversal Vulnerability

Gradio is an open source Python library that is a way to demonstrate machine learning models through a friendly web interface. A path traversal vulnerability exists in Gradio versions prior to 4.11.0, which stems from a path traversal vulnerability in /file...

PT-2023-32462

Name of the Vulnerable Software and Affected Versions LioXERP versions prior to v.146 Description The issue is related to an improper neutralization of input during web page generation, which allows for Cross-site Scripting XSS. Specifically, it enables an authenticated user to execute Stored XSS...

Cacti security breach

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to obtain data , using RRDtool drawing graphs to analyze , and provide data and user management features . A security vulnerability exists in Cacti versions prior to 1.2.26,...

Softomi Advanced C2C Marketplace SQL Injection Vulnerability

Softomi Advanced C2C Marketplace is a marketplace e-commerce software from Softomi. An SQL injection vulnerability exists in versions prior to Softomi Advanced C2C Marketplace 12122023, which stems from incorrect neutralization of special elements used in SQL commands, leading to SQL injection...

PT-2023-21066 · Netapp · Ontap Mediator

Name of the Vulnerable Software and Affected Versions: ONTAP Mediator versions prior to 1.7 Description: The issue allows an unauthenticated attacker to enumerate URLs via the REST API. Recommendations: For versions prior to 1.7, update to version 1.7 or later to resolve the issue. As a temporary...

PT-2023-32461

Name of the Vulnerable Software and Affected Versions LioXERP versions prior to 146 Description The issue affects LioXERP, allowing Reflected XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting attacks. Recommendations For versions prior t...

CVE-2023-6871

Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability affects Firefox 121...

Mozilla Firefox Security Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox prior to version 121, which stems from a Toast notification being generated in a background thread that obscures the full-screen notification displayed by Firefox...

PT-2023-32753

Name of the Vulnerable Software and Affected Versions huggingface/transformers versions prior to 4.36.0 Description The issue is related to the deserialization of untrusted data in the huggingface/transformers GitHub repository. Recommendations For versions prior to 4.36.0, update to version 4.36...

ClearML Server Cross-Site Scripting Vulnerability

ClearML Server is an open source suite of tools from ClearML that simplifies machine learning workflows. A cross-site scripting vulnerability exists in versions of ClearML Server prior to 1.13.0 that stems from vulnerability to stored cross-site scripting XSS attacks...