CVE-2023-23465

The CVE-2023-23465 entry concerns Media CP Media Control Panel with a CSRF vulnerability via an unspecified endpoint. Affected: Media CP Media Control Panel (no product/version details provided in the documents). Root cause: CSRF without details on the vulnerable endpoint or parameters. Impact: h...

CVE-2023-23467

Media CP Media Control Panel shows a reflected XSS vulnerability via an unspecified endpoint. The Connected documents consistently describe reflected XSS without detailing affected versions, exploit specifics, or a fix. No remediation information is provided in the supplied sources; monitor for u...

CVE-2023-23466

Technical details about CVE-2023-23466 are not publicly provided in the supplied documents. Monitor for updates.

WordPress Google Maps CP Plugin <= 1.0.43 is vulnerable to Broken Access Control

Software Google Maps CP Type Plugin Vulnerable versions = 1.0.43 Fixed in 1.0.44 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25039 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c47b9f1f0687 Credits István Márton Required...

PT-2023-13609 · Mega · Mega Hopex

Name of the Vulnerable Software and Affected Versions: Mega HOPEX versions 15.2.0.6110 through V5CP2 Description: The application is prone to reflected Cross-site Scripting XSS in several features. Recommendations: For Mega HOPEX versions 15.2.0.6110 through V5CP2, update to a version after V5CP2...

MyBB < 1.8.33 Directory Traversal Vulnerability

MyBB is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb"; ifdescription...

CVE-2022-45867

MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with high privileges, to achieve local file inclusion and execution...

Directory traversal

MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with high privileges, to achieve local file inclusion and execution...

PT-2022-6184 · Gnu · Gnu Core Utilities

Name of the Vulnerable Software and Affected Versions: GNU Core Utilities affected versions not specified Description: The issue is related to the distribution of resources without limits or regulation in the cp utility of the GNU Core Utilities package in the EMIAS OS operating system...

CVE-2022-43709

MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings...

Sql injection

MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings...

CVE-2022-43709

MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings...

CVE-2022-43709

Summary of CVE-2022-43709 : MyBB 1.8.31 contains a SQL injection vulnerability in the Admin CP → Users module. The issue allows remote authenticated users to modify the query string via direct user input or stored search filter settings, enabling partial data integrity impact as described in the ...

opencryptoki bug fix and enhancement update

An update is available for opencryptoki. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The opencryptoki packages contain version 2.11 of the PKCS11 API,...

MyBB < 1.8.31 RCE Vulnerability (GHSA-hxhm-rq9f-7xj7)

MyBB is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

Double free

MyBB is a free and open source forum software. The Mail Settings ? Additional Parameters for PHP's mail function mailparameters setting value, in connection with the configured mail program's options and behavior, may allow access to sensitive information and Remote Code Execution RCE. The...

CVE-2022-2567

The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2567

The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Cross site scripting

The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2567 Form Builder CP < 1.2.32 - Admin+ Stored Cross-Site Scripting

The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...