13344 matches found
CVE-2022-3999
The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have authorisation and CSRF in an AJAX action, which could allow any authenticated users, such as subscriber to delete arbitrary options from the blog, which could make the blog unavailable...
CVE-2022-37906
An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability results in the ability to delete arbitrary files on the underlying operating system...
Buffer overflow
IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many CA certificates in a short period of time. IBM X-Force ID: 2226337...
Path traversal
An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability results in the ability to delete arbitrary files on the underlying operating system...
PT-2024-11817 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Universal Disk Format UDF in the Linux kernel, where a problem with preallocation discarding at indirect extent boundaries could lead to corruption of the...
Pwn 跨站请求伪造漏洞
Pwn is an application by the individual developer of H.U.C - White Sea CTF-hacker. Pwn suffers from a security vulnerability that stems from an unknown section of its delete.html file that allows an attacker to implement cross-site request forgery. The attack method is publicly available and can ...
PT-2022-26941 · Unknown · Ctf-Hacker Pwn
Name of the Vulnerable Software and Affected Versions: CTF-hacker pwn affected versions not specified Description: A problematic vulnerability has been found in CTF-hacker pwn, affecting an unknown part of the file delete.html. The manipulation leads to cross-site request forgery, which can be...
CVE-2022-23143
ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an attacker with high permissions could use this vulnerability to maliciously delete and modify files...
PT-2022-15881 · Zte · Zte Otcp
Name of the Vulnerable Software and Affected Versions: ZTE OTCP product affected versions not specified Description: The issue is related to improper permission settings, allowing an attacker with high permissions to maliciously delete and modify files. Recommendations: At the moment, there is no...
CVE-2022-4220
The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the listquestions function. This makes it possible for unauthenticated attackers to delete questions from quizzes via a forged...
CVE-2022-4219
The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the manage function. This makes it possible for unauthenticated attackers to delete submitted quiz responses via a forged request...
Cross site request forgery (csrf)
The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the listquestions function. This makes it possible for unauthenticated attackers to delete questions from quizzes via a forged...
Cross site request forgery (csrf)
The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the manage function. This makes it possible for unauthenticated attackers to delete submitted quiz responses via a forged request...
CVE-2022-44290
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php...
CVE-2022-4220 Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Question Deletion
The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the listquestions function. This makes it possible for unauthenticated attackers to delete questions from quizzes via a forged...
CVE-2022-44277
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=deleteproduct...
Sanitization Management System SQL注入漏洞
Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. Sanitization Management System v1.0 suffers from a SQL injection vulnerability that originates from SQL injection via /php-sms/classes/Master.php?f=deleteproduct...
PT-2022-27162 · Unknown · Sanitization Management System
Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the /php-sms/classes/Master.php?f=delete product API endpoint. This allows for potential manipulation of database queries...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is a U.S. GitHub open source application. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server versions prior to 3.7, which...