275 matches found
PT-2023-16694 · WordPress · Wp Meta Seo
Name of the Vulnerable Software and Affected Versions: WP Meta SEO plugin for WordPress versions up to, and including, 4.5.3 Description: The issue arises from a missing capability check on the wpmsGGSaveInformation function, allowing authenticated attackers with subscriber-level access to update...
SUSE CVE-2017-12424
In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes with a buffer overflow or other memory corruption or other unspecified behaviors. This crosses a privilege boundary in, for example,...
SUSE CVE-2022-41946
pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either PreparedStatement.setTextint, InputStream or PreparedStatemet.setByteaint, InputStream will create a temporary file if the InputStream is larger than 2k. This will create a temporary file which...
ChurchCRM SQL注入漏洞
ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM v4.5.3 and earlier versions that stems from the presence of a SQL injection vulnerability via the EID parameter in GetText.php...
PT-2022-28013 · WordPress · Profilepress
Name of the Vulnerable Software and Affected Versions: ProfilePress plugin for WordPress versions up to, and including, 4.5.0 Description: The issue is related to Stored Cross-Site Scripting via the wp user cover default image url parameter due to insufficient input sanitization and output...
PT-2022-6354 · Dell · Dell Rugged Control Center
Name of the Vulnerable Software and Affected Versions: Dell Rugged Control Center versions prior to 4.5 Description: The issue is related to improper input validation in the Service EndPoint, which could allow a local low-privilege attacker to potentially exploit this and escalate privileges...
WordPress plugin WPML Multilingual CMS premium 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WPML Multilingual CMS premium plugin 4.5.10 and earlier versions are vulnerable to an acces...
CVE-2022-45072
Cross-Site Request Forgery CSRF vulnerability in WPML Multilingual CMS premium plugin = 4.5.13 on WordPress...
PT-2022-35078 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a refcount leak in the tegra210 clock init function. It was introduced in version v4.5 and fixed in version v6.0.3. The actual impact and attack plausibility have not...
PT-2022-24992 · Unknown · Nukeviet Cms
Name of the Vulnerable Software and Affected Versions: NukeViet CMS versions prior to 4.5 Description: A vulnerability has been found in the function filterAttr of the file vendor/vinades/nukeviet/Core/Request.php of the component Data URL Handler. The manipulation of the argument attrSubSet lead...
IrfanView 缓冲区错误漏洞
IrfanView is an image viewer by the individual developer Irfan Skiljan from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView version 4.54, which stems from a user-mode write access conflict issue i...
IrfanView 缓冲区错误漏洞
IrfanView is an image viewer by the individual developer Irfan Skiljan from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView version 4.54, which stems from a user-mode write access conflict issue i...
PT-2022-18727 · Cynet · Cynet 360 Web Portal
Name of the Vulnerable Software and Affected Versions: Cynet 360 Web Portal versions prior to 4.5 Description: The issue allows attackers to access a list of excluded files and profiles via a crafted GET request sent to "/WebApp/SettingsExclusion/GetExclusionsProfiles". Recommendations: For...
Samsung Galaxy Store 输入验证错误漏洞
Samsung Galaxy Store is an application store of Samsung Mobile Samsung in South Korea. versions prior to Samsung Galaxy Store 4.5.41.8 are vulnerable to an input validation error, which could be exploited by attackers to launch campaigns with Galaxy Store privileges...
CVE-2022-30874
There is a Cross Site Scripting Stored XSS vulnerability in NukeViet CMS before 4.5.02...
Mattermost Server vulnerable to Denial of Service through `@` character prefix inserted into JavaScript field names
An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows attackers to cause a denial of service application crash via an @ character before a JavaScript field name...
CVE-2021-22531
A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0...
Micro Focus NetIQ Access Manager 跨站脚本漏洞
Micro Focus NetIQ Access Manager NAM is a resource access control solution from Micro Focus UK. The solution provides multiple authentication, data encryption, single sign-on and SSLVPN for local and remote users. A security vulnerability exists in Micro Focus NetIQ Access Manager 4.5 and 5.0,...
CVE-2022-30236
A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an attacker uses cross-domain attacks. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior...