CVE-2024-29908 WordPress Co-marquage service-public.fr plugin <= 0.5.71 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kienso Co-marquage service-public.Fr allows Stored XSS.This issue affects Co-marquage service-public.Fr: from n/a through 0.5.71...

CVE-2024-29908

Technical details about CVE-2024-29908 are not publicly provided in the supplied documents. The data only notes a Stored XSS in Kienso Co-marquage service-public.Fr and the affected version range; monitor vendor advisories.

CVE-2024-29908 WordPress Co-marquage service-public.fr plugin <= 0.5.71 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kienso Co-marquage service-public.Fr allows Stored XSS.This issue affects Co-marquage service-public.Fr: from n/a through 0.5.71...

PT-2024-23129 · Unknown · Kienso Co-Marquage Service-Public.Fr

Name of the Vulnerable Software and Affected Versions: Kienso Co-marquage service-public.Fr versions 0.5.71 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

JVN#40367518: SonicDICOM Media Viewer may insecurely load Dynamic Link Libraries

SonicDICOM Media Viewer provided by Fujidenolo Solutions Co., Ltd. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privileges of the running application. Solution Update the Software...

WordPress Plugin Co-marquage service-public.fr 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-2710 · Cockpit +9 · Cockpit +9

Name of the Vulnerable Software and Affected Versions: Performance Co-Pilot PCP versions 4.3.4 and newer Description: The issue is related to the pmproxy component of the Performance Co-Pilot PCP software, which is used for monitoring and visualizing performance. It involves the exposure of...

pcp 安全漏洞

pcp is a system performance analysis toolkit. A security vulnerability exists in pcp that stems from allowing an attacker to execute remote commands via pmproxy...

PT-2024-22998 · Unknown · Kienso Co-Marquage Service-Public.Fr

Name of the Vulnerable Software and Affected Versions: Kienso Co-marquage service-public.Fr versions 0.5.72 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, allowing Reflected XSS. This means an...

WordPress Plugin Author Box, Guest Author and Co-Authors for Your Posts 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Plugin Co-marquage service-public.fr 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

calendrier.tunisie.co Cross Site Scripting vulnerability OBB-3884990

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Co-marquage service-public.fr Plugin <= 0.5.72 is vulnerable to Cross Site Scripting (XSS)

Software Co-marquage service-public.fr Type Plugin Vulnerable versions = 0.5.72 Fixed in 0.5.73 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29758 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 54a2401a71ec Credits Yudistira Arya...

WordPress Co-marquage service-public.fr Plugin <= 0.5.71 is vulnerable to Cross Site Scripting (XSS)

Software Co-marquage service-public.fr Type Plugin Vulnerable versions = 0.5.71 Fixed in 0.5.72 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29908 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 763202f8c632 Credits LVT-tholv2k Required...

CVE-2024-29244

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the pincode3g parameter at /apply.cgi...

CVE-2024-29243

CVE-2024-29243 affects Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9, with a vulnerability in the VPN API endpoint (vpn_client_ip at /apply.cgi) that allows a buffer overflow. The Red Hat and CNNVD entries corroborate a buffer overflow condition; PT-Security notes a workaround: avoid ...

CVE-2024-28446

CVE-2024-28446 affects Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 (v1.2.9). A buffer overflow is triggered by the lan_netmask parameter via the /apply.cgi API endpoint. CVSS v3.1 base score 5.7 (AV:A, AC:L, PR:L, UI:N, S:U, C:N, I:N, A:H). Connected sources consistently list LBT-T300-min...

CVE-2024-28446

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lannetmask parameter at /apply.cgi...

Binary vulnerability in Damon database (CNVD-2024-19259)

Wuhan Damon Database Co., Ltd. is a leading database product development service provider in China, and a key promoter of the development of domestic database basic software industry. A binary vulnerability exists in Damon Database, which can be exploited by attackers to cause a denial of service...

Command Execution Vulnerability in DAS Green Alliance Database Auditing System of Beijing Shenzhou Green Alliance Technology Co.

Beijing Shenzhou Green Alliance Technology Co., Ltd. is an enterprise mainly engaged in science and technology promotion and application services. A command execution vulnerability exists in the DAS Green Alliance database auditing system of Beijing Shenzhou Green Alliance Technology Co. Ltd, whi...