341 matches found
PT-2024-27936 · Advantech · Advantech Adam 5550
Name of the Vulnerable Software and Affected Versions: Advantech ADAM 5550 affected versions not specified Description: The device's web application includes a "logs" page where all HTTP requests received are displayed to the user. However, it fails to correctly neutralize malicious code when...
PT-2024-27363 · Advantech · Advantech Adam 5550
Name of the Vulnerable Software and Affected Versions: Advantech ADAM-5550 affected versions not specified Description: The issue is related to the use of weak encryption algorithms in the Advantech ADAM-5550, specifically base 64 encoding, which can allow an attacker to disclose user credentials...
PT-2024-6491 · Advantech · Adam-5630
Name of the Vulnerable Software and Affected Versions: Advantech ADAM-5630 affected versions not specified Description: The issue is related to a cross-site request forgery CSRF vulnerability, which allows an attacker to partly circumvent the same origin policy. This policy is designed to prevent...
PT-2024-6551 · Advantech · Adam-5630
Name of the Vulnerable Software and Affected Versions: Advantech ADAM-5630 affected versions not specified Description: The issue concerns the cookies of authenticated Advantech ADAM-5630 users, which remain active and valid even after a session is closed. This allows an unauthorized attacker to...
PT-2024-6690 · Advantech · Adam-5630
Name of the Vulnerable Software and Affected Versions: Advantech ADAM-5630 affected versions not specified Description: The issue is related to the transmission of user credentials in plain text between the device and the user source device during the login process. This is due to the use of weak...
PT-2024-7021 · Advantech · Advantech Adam-5630
Name of the Vulnerable Software and Affected Versions: Advantech ADAM-5630 affected versions not specified Description: The issue is related to the lack of authentication for a critical function in the Advantech ADAM-5630 programmable logic controller PLC. This allows a remote attacker to execute...
MAL-2024-2480 Malicious code in hoo-watch-black-adam-full-movies-online-streamings-at-homes (npm)
--- -= Per source details. Do not edit below this line.=-...
adammarshall.com.au Cross Site Scripting vulnerability OBB-3934310
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-33951 WordPress Perfect Pullquotes plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Adam DeHaven Perfect Pullquotes allows Stored XSS.This issue affects Perfect Pullquotes: from n/a through 1.7.5...
CVE-2024-33951
CVE-2024-33951: Stored XSS in WordPress plugin Perfect Pullquotes. Affected: Perfect Pullquotes versions up to and including 1.7.5. The vulnerability is an authenticated (Contributor+) stored cross-site scripting vector in the plugin’s output during web page generation. Public exploitation detail...
CVE-2024-32546
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Tax Rate Upload: from n/a through 2.4.5...
CVE-2024-32546
CVE-2024-32546: Reflected XSS in Tax Rate Upload WordPress plugin (
CVE-2024-32546 WordPress Tax Rate Upload plugin <= 2.4.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Tax Rate Upload: from n/a through 2.4.5...
CVE-2024-26791
A vulnerability was found in the Linux kernel's btrfs filesystem related to the dev-replace feature. The issue stems from inadequate validation of device names. This flaw could allow an attacker unauthorized access or manipulation of devices, impacting the system's security. Mitigation Mitigation...
CVE-2024-26791 btrfs: dev-replace: properly validate device names
In the Linux kernel, the following vulnerability has been resolved: btrfs: dev-replace: properly validate device names There's a syzbot report that device name buffers passed to device replace are not properly checked for string termination which could lead to a read out of bounds in getnamekerne...
CVE-2024-26791
CVE-2024-26791 — Linux kernel: btrfs dev-replace: properly validate device names. A syzbot report indicated device name buffers passed to device replace could read beyond end (getname_kernel) due to insufficient termination checks. The fix adds a helper that validates both source and target devic...
CVE-2024-26791
In the Linux kernel, the following vulnerability has been resolved: btrfs: dev-replace: properly validate device names There's a syzbot report that device name buffers passed to device replace are not properly checked for string termination which could lead to a read out of bounds in getnamekerne...
CVE-2024-31105
Cross-Site Request Forgery CSRF vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Tax Rate Upload: from n/a through 2.4.5...
CVE-2024-31105
CVE-2024-31105 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Tax Rate Upload that enables Reflected XSS. The entry lists affected software as Tax Rate Upload (n/a) up to version 2.4.5. Reported metrics (CVSS v3.1 base score 7.1, HIGH) indicate network attack vector,...
