CVE-2023-28991

CVE-2023-28991 corresponds to a Stored XSS vulnerability in the PI Websolution Order date, Order pickup, Order date time, Pickup Location, and delivery date components of the WP plugin for WooCommerce, affected

WordPress Plugin Order date time for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2023-27920

Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to alter system date/time of the affected product...

Improper access control

Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to alter system date/time of the affected product...

Contec SolarView Compact 安全漏洞

Contec SolarView Compact is an application system from Contec Japan. It provides measurement system for photovoltaic power generation. A security vulnerability exists in Contec SolarView Compact SV-CPT-MC310 Ver.8.10 prior and SV-CPT-MC310F Ver.8.10 prior, which stems from the presence of an...

CVE-2023-27920

CVE-2023-27920 concerns an improper access control flaw in the system date/time setting page of Contec SolarView Compact SV-CPT-MC310 (pre-8.10) and SV-CPT-MC310F (pre-8.10). The underlying issue allows a remote authenticated attacker to alter the device’s system date/time. Public documentation a...

CVE-2023-27920

Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to alter system date/time of the affected product...

CVE-2023-27920

Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to alter system date/time of the affected product...

PT-2023-21420 · Unknown · Solarview Compact Sv-Cpt-Mc310

Name of the Vulnerable Software and Affected Versions: SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 SolarView Compact SV-CPT-MC310F versions prior to Ver.8.10 Description: The issue is related to improper access control in the system date/time setting page, allowing a remote...

Multiple vulnerabilities in SolarView Compact

Overview SolarView Compact provided by CONTEC CO.,LTD. contains multiple vulnerabilities listed below. Use of hard-coded credentials CWE-798 - CVE-2023-27512 OS command injection in the download page CWE-78 - CVE-2023-27514 Buffer overflow in the multiple setting pages CWE-120 - CVE-2023-27518 OS...

CVE-2023-30459

creationtimestamp| type| source ---|---|--- 2023-04-10 12:27:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4146 2023-04-14 18:26:05+00:00| seen| https://t.me/cibsecurity/62157...

SUSE CVE-2009-4378

The IPMI dissector in Wireshark 1.2.0 through 1.2.4 on Windows allows remote attackers to cause a denial of service crash via a crafted packet, related to "formatting a date/time using strftime."...

SUSE CVE-2015-8213

The getformat function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRETKEY...

SUSE CVE-2017-5838

The gstdatetimenewfromiso8601string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via a malformed datetime string...

Luxon 安全漏洞

Luxon is a Moment.js open source library for handling dates and times in JavaScript. Luxon has a security vulnerability that stems from its DateTime.fromRFC2822 method having quadratic N^2 complexity on certain inputs resulting in a denial of service when a user enters untrusted data into the...

CVE-2022-44022

creationtimestamp| type| source ---|---|--- 2022-10-30 06:30:52+00:00| seen| https://t.me/cibsecurity/52276...

CVE-2022-2566

creationtimestamp| type| source ---|---|--- 2022-09-23 16:13:23+00:00| seen| https://t.me/cibsecurity/50313 2022-09-30 11:00:26+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6887 2022-10-07 10:30:05+00:00| published-proof-of-concept| https://t.me/MrVGunz/540 2022-10-13...

CVE-2022-36529

creationtimestamp| type| source ---|---|--- 2022-08-26 22:30:22+00:00| seen| https://t.me/cibsecurity/48907...

CVE-2022-36530

creationtimestamp| type| source ---|---|--- 2022-08-16 16:39:04+00:00| seen| https://t.me/cibsecurity/48214...

CVE-2022-30154

creationtimestamp| type| source ---|---|--- 2022-07-07 21:03:50+00:00| seen| https://t.me/truesecator/3144...