VulnCheck KEV: CVE-2023-29919

SolarView Compact = 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted...

Fedora 37 : vim (2023-ce3f7d4818)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ce3f7d4818 advisory. The newest upstream commit Security fixes for CVE-2023-48233, CVE-2023-48231, CVE-2023-48232, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,...

[SECURITY] Fedora 39 Update: vim-9.0.2120-1.fc39

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

ShortPixel Image Optimizer < 5.4.2 - Authenticated(Editor+) PHP Object Injection

Description The ShortPixel Image Optimizer plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 5.4.1 via deserialization of untrusted input in post content. This allows authenticated attackers with editor capabilities or above to inject a PHP Object. No PO...

Fedora: Security Advisory (FEDORA-2023-45cf2b4014)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2023-328-01)

The version of vim installed on the remote host is prior to 9.0.2127. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-328-01 advisory. - Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure...

CVE-2023-41792

Cross-Site Request Forgery CSRF vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the SNMP Trap Editor. This issue affects Pandora FMS: from 700 through 773...

CVE-2023-41792

Cross-Site Request Forgery CSRF vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the SNMP Trap Editor. This issue affects Pandora FMS: from 700 through 773...

CVE-2023-41792 Lack of Authorization and Stored XSS Via SNMP Trap Editor Page

Cross-Site Request Forgery CSRF vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the SNMP Trap Editor. This issue affects Pandora FMS: from 700 through 773...

CVE-2023-41792

Summary : CVE-2023-41792 is a CSRF issue in Pandora FMS that enables Stored XSS via the SNMP Trap Editor. Affected versions are 700–773. The connected PT/PTSecurity entries confirm this CSRF/XSS combination and list Pandora FMS as the affected product. The NVD entry mirrors the description and im...

Accordion < 2.7 - Authenticated (Editor+) Stored Cross-Site Scripting via accordion settings

Description The Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access and...

Welcome Email Editor < 5.0.7 - Subscriber+ Email Sending

Description The plugin does not have authorisation in its ajaxhandler function, allowing any authenticated users, such as subscriber to call it and send various emails...

Nexter Extension < 2.0.4 - Authenticated(Editor+) Remote Code Execution via metabox

Description The Nexter Extension plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.3 via the nxt-code-php-snippet metabox. This allows authenticated attackers with editor-level privileges and above to execute code on the server...

Artica Pandora FMS Cross-Site Request Forgery Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A cross-site request forgery vulnerability exists in Artica Pandora FMS versions 700 through 773, which originates from a...

Foxit PDF Editor for Mac < 2023.3 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 2023.3. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on...

Vulnerabilities fixed in Foxit PDF Reader and PDF Editor

Foxit has fixed vulnerabilities in PDF Reader and PDF Editor formerly PhantomPDF. A malicious party could exploit them to cause a denial-of-service, execute arbitrary execute arbitrary code with the victim's privileges or to access gain access to sensitive data in the victim's context. Successful...

WordPress Salon booking system Plugin < 8.7 is vulnerable to Privilege Escalation

Software Salon booking system Type Plugin Vulnerable versions 8.7 Fixed in 8.7 OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2023-48319 Patch priority Medium CVSS severity Medium 6.8 Developer Claim ownership PSID 1c2a0bce4628 Credits lttn Required privilege...

PT-2023-28095 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 773 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Cross-Site Scripting XSS, enabling the execution of Javascript code in the SNMP Trap Editor...

CVE-2023-48706

Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later...

AZL-32047 CVE-2023-48706 affecting package vim for versions less than 9.0.2121-1

Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later...