2878 matches found
CVE-2023-20592: Undefined Security Weakness
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine VM memory integrity...
PT-2023-30314 · Unknown · Prestashop
Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 5.1.4 Description: The issue affects the blockreassurance module in PrestaShop, which is designed to offer helpful information to reassure customers about the store's trustworthiness. A back-office BO user can...
CVE-2023-4910
A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache...
Cross site scripting
Cross Site Scripting XSS vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering...
Hillstone Next Generation FireWall SG-6000-e3960 Security Vulnerability
Hillstone Networks Next Generation FireWall SG-6000-e3960 is a Web firewall from Hillstone Networks, China. A security vulnerability exists in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5. A remote attacker could exploit this vulnerability to execute arbitrary code by using front-end...
PT-2023-30274 · Hillstone · Hillstone Next Generation Firewall Sg-6000-E3960
Name of the Vulnerable Software and Affected Versions: Hillstone Next Generation FireWall SG-6000-e3960 version 5.5 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code. This is due to the use of front-end filtering instead of back-end filtering...
CVE-2023-46964
Cross Site Scripting XSS vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering...
CVE-2023-46964
CVE-2023-46964 affects Hillstone Next Generation Firewall SG-6000-e3960 (v5.5). The issue is a Cross Site Scripting (XSS) vulnerability due to using front-end filtering instead of back-end filtering, enabling a remote attacker to execute arbitrary code. Impact is described as arbitrary code execu...
CVE-2023-27170
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter...
CVE-2023-27170
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter...
CVE-2023-27170
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter...
Directory traversal
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter...
Xpand IT Write-back manager security vulnerability
Xpand IT Write-back manager is an extension for Xpand IT. that allows users to enter data directly from Tableau dashboards into the database. A security vulnerability exists in Xpand IT Write-back manager version v2.3.1, which stems from allowing an attacker to perform directory traversal via the...
CVE-2023-27170
Xpand IT Write-back Manager, version 2.3.1, is affected by a directory traversal vulnerability triggered by modifying the siteName parameter. The issue enables attackers to access sensitive files/directories, constituting a high-severity impact per CVE-2023-27170. Documented attempts and descript...
CVE-2023-27170
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter...
PT-2023-20987 · Xpand It · Xpand It Write-Back Manager
Name of the Vulnerable Software and Affected Versions: Xpand IT Write-back manager version 2.3.1 Description: The issue allows attackers to perform a directory traversal via modification of the siteName parameter. This enables unauthorized access to sensitive files and directories. Recommendation...
CVE-2023-27170
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter...
CVE-2023-27170: Improper Limitation of a Pathname to a Restricted Directory
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter...