CVE-2022-28320

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28309: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2022-28308

CVE-2022-28308 affects Bentley View 10.16.02.022. The issue is in parsing 3DS files, where crafted data can trigger a read past the end of an allocated buffer. This could disclose sensitive information and, in conjunction with other vulnerabilities, allow arbitrary code execution in the current p...

CVE-2023-1666

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. This vulnerability affects unknown code of the file users/classes/viewclass.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

PT-2023-17155 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue has been found in the GET Parameter Handler component, specifically in the file users/classes/view class.php. The manipulation of the id argume...

Automatic Question Paper Generator System SQL Injection Vulnerability

Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A security vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which stems from a problem in the file users/classes/viewclass.ph...

CVE-2023-20947

In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Osprey Pump Controller: Operating System Command Injection Vulnerability

Osprey Pump Controller is a pump controller from Osprey. A security vulnerability exists in Osprey Pump Controller version 1.01, which stems from the presence of an operating system command injection vulnerability. An attacker can exploit this vulnerability to inject and execute arbitrary shell...

org.wso2.samples.is:photo-edit (>=4.3.4, <=4.4.0), org.wso2.samples.is:photo-view (>=4.3.4, <=4.4.0) +1 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (1.3)

net.minidev:json-smart MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.minidev:json-smart and may be impacted: - org.wso2.samples.is:photo-edit =4.3.4, =4.3.4, =4.3.4, =4.4.0 Source cves: CVE-2023-1370 Source advisory:...

CVE-2023-28684

CVE-2023-28684 affects Jenkins’ remote-jobs-view-plugin (versions 0.0.3 and earlier). The root cause is an XML parser not configured to prevent XML external entity (XXE) attacks. This vulnerability can be exploited by authenticated attackers with Overall/Read permission to have Jenkins parse craf...

CVE-2023-28684

Jenkins remote-jobs-view-plugin Plugin 0.0.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2023-28684

Jenkins remote-jobs-view-plugin Plugin 0.0.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2023-28670

Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting XSS vulnerability exploitable by authenticated attackers with Overall/Read permission...

CVE-2023-28670

Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting XSS vulnerability exploitable by authenticated attackers with Overall/Read permission...

CVE-2023-28670

The CVE-2023-28670 entry pertains to Jenkins Pipeline Aggregator View Plugin (versions 1.13 and earlier). The vulnerability is a stored XSS where a variable representing the current view URL is not escaped in inline JavaScript, enabling exploitation by authenticated attackers with Overall/Read pe...

CVE-2023-1592

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file admin/courses/viewclass.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

CVE-2023-28684: Improper Restriction of XML External Entity Reference

Jenkins remote-jobs-view-plugin Plugin 0.0.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2023-28670: Improper Neutralization of Input During Web Page Generation

Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting XSS vulnerability exploitable by authenticated attackers with Overall/Read permission...

PT-2023-21891 · Jenkins · Jenkins Pipeline Aggregator View Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline Aggregator View Plugin versions 1.13 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because a variable representing the current view's URL is not properly escaped i...

PT-2023-17101 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical vulnerability was found in the SourceCodester Automatic Question Paper Generator System. This issue affects the file admin/courses/view class.php of...