3196 matches found
PT-2024-17492
Name of the Vulnerable Software and Affected Versions idna versions 0.5.0 and earlier url versions prior to 2.5.4 Description The issue is related to improper validation of unsafe equivalence in punycode by the idna crate from Servo rust-url. This allows an attacker to create a punycode hostname...
PT-2023-9660 · FFmpeg +4 · Ffmpeg +4
Name of the Vulnerable Software and Affected Versions: FFmpeg versions n5.1 to n6.1 Description: The issue is related to an Off-by-one Error vulnerability in the libavfilter/avf showspectrum.c component of the FFmpeg library. This vulnerability allows attackers to cause a Denial of Service DoS vi...
PT-2023-8327 · Scada-Lts · Scada-Lts
Name of the Vulnerable Software and Affected Versions: Scada-LTS versions 2.7.5.2 build 4551883606 and before Description: The issue is related to insufficient access control in the Event Handlers function of the Scada-LTS mult-platform web solution for creating Scada systems. This allows remote...
PT-2023-25642 · St · St54-Android-Packages-Apps-Nfc
Name of the Vulnerable Software and Affected Versions: ST ST54-android-packages-apps-Nfc package version 130-20230215-23W07p0 and earlier Description: The issue is related to an out-of-bounds read in the ST ST54-android-packages-apps-Nfc package for Android. Recommendations: For versions prior to...
The vulnerability of the main file function /cgi-bin/cstecgi.cgi?action=login of the TOTOLINK A7100RU router’s software, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the main function in the /cgi-bin/cstecgi.cgi?action=login script of the TOTOLINK A7100RU router’s software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
PT-2023-31139
Name of the Vulnerable Software and Affected Versions Hotel Management version 1.0 Description The issue concerns multiple authenticated Reflected Cross-Site Scripting vulnerabilities. Specifically, the check out date parameter of the "reservation.php" resource is copied into the HTML document as...
PT-2023-8155 · Voltronic Power · Voltronic Power Viewpower
Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower versions affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit thi...
PT-2023-31138
Name of the Vulnerable Software and Affected Versions Hotel Management version 1.0 Description The issue concerns multiple authenticated Reflected Cross-Site Scripting vulnerabilities. Specifically, the check in date parameter of the "reservation.php" resource is copied into the HTML document as...
PT-2023-8158 · Voltronic Power · Voltronic Power Viewpower
Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower Pro affected versions not specified Description: This issue allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower Pro. The specific flaw exists within the...
PT-2023-32766 · Sourcecodester · Sourcecodester Online Tours & Travels Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue affects the function prepare of the file email setup.php. The manipulation of the argument name leads to SQL injection. The exploit has been...
Structured Content < 1.6 - Contributor+ Stored XSS
Description The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user...
PT-2023-31133 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality...
PT-2023-32638 · Canonical +1 · Gitlab
Name of the Vulnerable Software and Affected Versions: No information available about the vulnerable software and its affected versions. Description: No details are provided about the issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
Cross Site Scripting (XSS)
org.owasp.esapi:esapi is vulnerable to Cross-site Scripting XSS. The Validator.isValidSafeHTML method, which is responsible for determining whether user-supplied input is safe to include in HTML content, exhibits a flaw that can lead to false negatives. This means that the method may incorrectly...
PT-2023-31037 · Tenda · Tenda Ax1803
Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue allows a remote attacker to execute arbitrary code via the ssid parameter in the form fast setting wifi set function. This enables the attacker to potentially gain control over the device...
WordPress WP ALL Export Pro Plugin < 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP ALL Export Pro Type Plugin Vulnerable versions 1.8.6 Fixed in 1.8.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-5886 Patch priority Low CVSS severity Low 9.6 Developer Claim ownership PSID e2621499c15e Credits Alex Sanford Require...
PT-2023-36291 · Unknown · Fdo-Client
Name of the Vulnerable Software and Affected Versions: fdo-client affected versions not specified Description: The issue concerns the removal of a build key via utils/keys gen.sh. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
PT-2023-32526
Name of the Vulnerable Software and Affected Versions Neutron IP Camera versions prior to b1130.1.0.1 Description The issue is related to a Path Traversal vulnerability, allowing Absolute Path Traversal using '/../filedir'. This enables unauthorized access to files on the system. Recommendations...
PT-2023-27201 · Pluggabl Llc · Pluggabl Llc Booster For Woocommerce
Name of the Vulnerable Software and Affected Versions: Pluggabl LLC Booster for WooCommerce plugin versions prior to 7.1.1 Description: The issue concerns exposure of sensitive information to unauthorized actors. Recommendations: For versions prior to 7.1.1, update to version 7.1.1 or later to...
