2001 matches found
Exploit for Command Injection in Ui Er-X_Firmware
Joomla! CVE-2023-23752 - Unauthenticated Information Disclosur...
PT-2024-28291 · Unknown · Px4-Autopilot
Name of the Vulnerable Software and Affected Versions: PX4-Autopilot version 1.14.3 Description: A buffer overflow issue was discovered in PX4-Autopilot via the topic name parameter at the "/logger/logged topics.cpp" API endpoint. Recommendations: For PX4-Autopilot version 1.14.3, as a temporary...
CVE-2022-44593
Use of Less Trusted Source vulnerability in SolidWP Solid Security allows HTTP DoS.This issue affects Solid Security: from n/a through 9.3.1...
PT-2024-27697 · Trendnet · Trendnet Tew-814Dap
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-814DAP version 1 FW1.01B01 Description: The issue allows attackers to log in as root due to a hardcoded password vulnerability found in /etc/shadow.sample. This enables unauthorized access to the system. Recommendations: For...
PT-2024-19587 · Itss · Itss Imlog
Name of the Vulnerable Software and Affected Versions: ITSS iMLog version 1.307 Description: A cross-site scripting XSS issue exists in the User Maintenance section, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...
PT-2024-13181 · WordPress · Wp Gpx Map
Name of the Vulnerable Software and Affected Versions: WP GPX Map versions 1.7.08 and earlier Description: A Missing Authorization issue has been identified. This issue affects the WP GPX Map plugin. Recommendations: For WP GPX Map versions 1.7.08 and earlier, update to a version that contains a...
PT-2024-11988 · Mainwp · Mainwp Mainwp Updraftplus Extension
Name of the Vulnerable Software and Affected Versions: MainWP MainWP UpdraftPlus Extension versions 4.0.6 and earlier Description: The issue is related to a Missing Authorization vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide o...
CVE-2024-22151
Missing Authorization vulnerability in Codection Import and export users and customers.This issue affects Import and export users and customers: from n/a through 1.24.6...
CVE-2024-35659
Authorization Bypass Through User-Controlled Key vulnerability in KiviCare.This issue affects KiviCare: from n/a through 3.6.2...
Microsoft Edge (Chromium-Based) Multiple Vulnerabilities - Jun24
Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SQL injection in litellm
A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update' process. The vulnerability arises due to the improper handling of the 'userid' parameter in the raw SQL query used for deleting users. An attacker can exploit this vulnerability b...
GHSA-8J42-PCFM-3467 SQL injection in litellm
A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update' process. The vulnerability arises due to the improper handling of the 'userid' parameter in the raw SQL query used for deleting users. An attacker can exploit this vulnerability b...
PT-2024-26480 · Totolink · Totolink Cp900L
Name of the Vulnerable Software and Affected Versions: TOTOLINK CP900L version 4.1.5cu.798 B20221228 Description: A stack overflow issue was discovered via the desc parameter in the SetPortForwardRules function. This allows for potential exploitation. Recommendations: For TOTOLINK CP900L version...
PT-2024-26476 · Totolink · Totolink Cp900L
Name of the Vulnerable Software and Affected Versions: TOTOLINK CP900L version 4.1.5cu.798 B20221228 Description: A hardcoded password issue was found in the /etc/shadow.sample file, allowing attackers to log in as root. Recommendations: For TOTOLINK CP900L version 4.1.5cu.798 B20221228, consider...
PT-2024-31215 · WordPress · The 140+ Widgets
Name of the Vulnerable Software and Affected Versions: The 140+ Widgets | Best Addons For Elementor – FREE for WordPress versions up to, and including, 1.4.3.1 Description: The issue allows authenticated attackers with contributor-level permissions and above to inject a PHP Object via...
VMware Workstation Multiple Vulnerabilities (VMSA_2024_0010) - Windows
VMware Workstation is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:workstation";...
PT-2024-3879 · Automationdirect · Automationdirect P3-550E
Name of the Vulnerable Software and Affected Versions: AutomationDirect P3-550E version 1.2.10.9 Description: Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality. Specially crafted network packets can lead to heap-based memory...
PT-2024-26544 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component "/admin/ca deal.php" with parameters mudi and nohrefStr. This allows for unauthorized requests. Recommendations: For idccms version 1.35,...
PT-2024-26553 · Tenda · Tenda Ax1806
Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.stb.port parameter in the formSetIptv function. Recommendations: For Tenda AX1806 version 1.0.0.1, avoid using the iptv.stb.port...