PT-2023-6264

Name of the Vulnerable Software and Affected Versions CP-8031 MASTER MODULE versions prior to CPCI85 V05.11 CP-8050 MASTER MODULE versions prior to CPCI85 V05.11 Description A vulnerability has been identified in the web server of the affected devices, which fails to properly sanitize user input...

CVE-2023-37194: Improper Access Control

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. The kernel memory of affected devices is exposed to user-mode via direct memory access DMA which could allow...

CVE-2023-42796: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05.11, CP-8050 MASTER MODULE All versions CPCI85 V05.11. The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint. This could allow an authenticated remote...

Siemens SIMATIC CP products

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2023-41732

Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Blocks plugin = 1.0.20 versions...

CVE-2023-41732

Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Blocks plugin = 1.0.20 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Blocks plugin = 1.0.20 versions...

CVE-2023-41732 WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Blocks plugin = 1.0.20 versions...

CVE-2023-41732

CVE-2023-41732 affects the WordPress plugin CP Blocks (CodePeople CP Blocks)

CVE-2023-41732 WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Blocks plugin = 1.0.20 versions...

PT-2023-28072

Name of the Vulnerable Software and Affected Versions CodePeople CP Blocks plugin versions 1.0.20 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

CVE-2023-41732: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Blocks plugin = 1.0.20 versions...

WordPress Plugin CP Blocks Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

Oracle Linux 7 : kubernetes / kubeadm-upgrade / kubeadm-ha-setup (ELSA-2019-4593)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4593 advisory. - OLCNE-235 CVE-2019-9946 portmap inserts rules at the front of the iptables nat chains -- CVE-2019-9946 -- CVE-2019-1002101 -- CVE-2019-1002100...

WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)

Software CP Blocks Type Plugin Vulnerable versions = 1.0.20 Fixed in 1.0.21 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41732 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 60f3812ae263 Credits István Márton Required...

MyBB < 1.8.36 RCE Vulnerability

MyBB is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

CVE-2023-41362

MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use eval, and there was some validation of the input to eval, but type juggling interfered with this when using PCRE within PHP...

Code injection

MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use eval, and there was some validation of the input to eval, but type juggling interfered with this when using PCRE within PHP...

CVE-2023-41362

MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use eval, and there was some validation of the input to eval, but type juggling interfered with this when using PCRE within PHP...

CVE-2023-41362

CVE-2023-41362 affects MyBB prior to 1.8.36. The issue is a code injection in Admin CP templates that use eval; although input validation existed, PHP PCRE type juggling interferes with eval, enabling code execution by users with certain high privileges. Affected: MyBB Admin CP/template code path...