miniCal CSV Injection Vulnerability

miniCal is miniCal open source an open source PMS. miniCal 1.0.0 and earlier versions exist CSV injection vulnerability , the vulnerability stems from improperly neutralized formula elements in CSV files , an attacker can exploit the vulnerability to remotely execute code...

CVE-2023-21660

Transient DOS in WLAN Firmware while parsing FT Information Elements...

CVE-2023-21660

The CVE-2023-21660 entry concerns Qualcomm WLAN Firmware and related chipsets, where a vulnerability causes a transient Denial-of-Service when parsing FT Information Elements in WLAN frames. Documents consistently describe the issue as a transient DOS affecting WLAN Firmware during FT IE parsing,...

CVE-2023-21660 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing FT Information Elements...

CVE-2023-21660 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing FT Information Elements...

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets due to a denial of service in the WLAN firmware when parsing FT information elements...

PT-2023-18323 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in WLAN Firmware that occurs while parsing FT Information Elements. Recommendations: At the moment, there is no information...

CVE-2023-21660: Buffer Over-read

Transient DOS in WLAN Firmware while parsing FT Information Elements...

D-Link DIR-846 Router Code Execution

The vulnerability of D-Link DIR-846 router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Aruba EdgeConnect Enterprise Command Injection

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2022-47139

Cross-Site Request Forgery CSRF vulnerability in Damir Calusic WP Basic Elements plugin = 5.2.15 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Damir Calusic WP Basic Elements plugin = 5.2.15 versions...

CVE-2022-47139 WordPress WP Basic Elements Plugin <= 5.2.15 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Damir Calusic WP Basic Elements plugin = 5.2.15 versions...

CVE-2022-47139

CVE-2022-47139 is a Cross-Site Request Forgery (CSRF) vulnerability in WordPress plugin WP Basic Elements (

WordPress plugin WP Basic Elements has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2023-15184 · WordPress · Wp Basic Elements

Name of the Vulnerable Software and Affected Versions: WP Basic Elements plugin versions prior to 5.2.15 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

CVE-2022-47139: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Damir Calusic WP Basic Elements plugin = 5.2.15 versions...

CVE-2023-2045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ipekyolu Software Auto Damage Tracking Software allows SQL Injection. This issue affects Auto Damage Tracking Software: before 4...

CVE-2023-2064

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Minova Technology eTrace allows SQL Injection. This issue affects eTrace: before 23.05.20...

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.60 is vulnerable to Other Vulnerability Type

Software Unlimited Elements For Elementor Free Widgets, Addons, Templates Type Plugin Vulnerable versions = 1.5.60 Fixed in 1.5.61 OWASP Top 10 A6: Security Misconfiguration Classification Other Vulnerability Type CVE CVE-2023-31090 Patch priority Low CVSS severity Low 9.9 Developer Unlimited...