2787 matches found
CVE-2024-33976
Cross-Site Scripting XSS vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'id' parameter in '/admin/user/index.php'...
Young Entrepreneur E-Negosyo System 跨站脚本漏洞
Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System by janobe individual developers. A cross-site scripting vulnerability exists in Young Entrepreneur E-Negosyo System version 1.0. An attacker can use this vulnerability to send a specially crafted JavaScript load to a use...
CVE-2024-41960
mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a JavaScript payload into the Relay Hosts configuration. The injected payload is executed whenever the configuration page is viewed, enabling the attacker to execute arbitrary scrip...
CVE-2024-2843: Cross-Site Request Forgery (CSRF)
The WooCommerce Customers Manager WordPress plugin before 30.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin users delete users via CSRF attacks...
CVE-2024-4977 Index WP MySQL For Speed < 1.4.18 - Admin+ Reflected XSS
The Index WP MySQL For Speed WordPress plugin before 1.4.18 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
PYSEC-2024-86
Wagtail is an open source content management system built on Django. A bug in Wagtail's parsequerystring would result in it taking a long time to process suitably crafted inputs. When used to parse sufficiently long strings of characters without a space, parsequerystring would take an unexpectedl...
CVE-2024-39317 Wagtail regular expression denial-of-service via search query parsing
Wagtail is an open source content management system built on Django. A bug in Wagtail's parsequerystring would result in it taking a long time to process suitably crafted inputs. When used to parse sufficiently long strings of characters without a space, parsequerystring would take an unexpectedl...
PT-2024-28441 · Wagtail · Wagtail
Name of the Vulnerable Software and Affected Versions: Wagtail versions prior to 5.2.6 Wagtail versions prior to 6.0.6 Wagtail versions prior to 6.1.3 Description: A bug in Wagtail's parse query string function would result in it taking a long time to process suitably crafted inputs, leading to a...
CVE-2024-6150
A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...
CVE-2024-6150
A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...
CVE-2024-6150
A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...
CVE-2024-6150
A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...
CVE-2024-6150
CVE-2024-6150 affects Citrix Provisioning. A non-admin user can cause short-term disruption of Target VM availability via Citrix Provisioning. Root cause per Citrix bulletin is improper access control. Mitigation: upgrade Citrix Provisioning to CR 2402+ or LTSR CU5 (2203 LTSR) / CU9 (1912 LTSR). ...
CVE-2024-40039
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=del...
CVE-2024-40038
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userScoredeal.php?mudi=rev...
PT-2024-37416 · Citrix · Citrix Provisioning
Name of the Vulnerable Software and Affected Versions: Citrix Provisioning affected versions not specified Description: A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning. Recommendations: At the moment, there is no information about a newer version...
idcCMS Security Breach
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idcCMS v1.35, which originates from a cross-site request forgery vulnerability in the...
idcCMS Security Breach
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Proxy System is a cloud management proxy system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idcCMS v1.35, which originates from a cross-site request forgery vulnerability in the...
PT-2024-9896 · Sap · Sap Transportation Management
Name of the Vulnerable Software and Affected Versions: SAP Transportation Management Collaboration Portal affected versions not specified Description: The issue allows an attacker with non-administrative privileges to send a crafted request from a vulnerable web application, triggering the...