11361 matches found
Improper Input Validation
cups-filter is vulnerable to Improper Input Validation. The cfGetPrinterAttributes5 function in libcupsfilters does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be...
CVE-2024-8608
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS. This issue affects ValeApp: before v2.0.0...
CVE-2024-8608
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS.This issue affects ValeApp: before v2.0.0...
WordPress plugin Mapplic Lite 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
openSUSE: Security Advisory for libmfx (SUSE-SU-2024:3397-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-47303
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for Elementor allows Stored XSS.This issue affects Livemesh Addons for Elementor: from n/a through 8.5...
WordPress plugin Livemesh Addons for Elementor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Talent BAP Automation 跨站脚本漏洞
Talent BAP Automation is an application from Talent, Inc. A cross-site scripting vulnerability exists in Talent BAP Automation versions prior to 30840, which stems from improper input neutralization during web page generation, making it susceptible to stored cross-site scripting attacks...
SUSE-SU-2024:3397-1 Security update for libmfx
This update for libmfx fixes the following issues: - CVE-2023-48368: Fixed an improper input validation. bsc1226897 - CVE-2023-45221: Fixed an improper buffer restrictions. bsc1226898 - CVE-2023-22656: Fixed an out-of-bounds read. bsc1226899 - CVE-2023-47282: Fixed an out-of-bounds write...
Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380 Improper Input Validation (CVE-2024-6077)
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover. This plugin only works with Tenable.ot. Please visit...
openSUSE Security Advisory (SUSE-SU-2024:3339-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libmfx (SUSE-SU-2024:3339-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3339-1 advisory. - CVE-2023-48368: Fixed an improper input validation. bsc1226897 - CVE-2023-45221: Fixed an...
CVE-2024-37879
Improper input validation in /admin/config/save in User-friendly SVN USVN before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo"...
CVE-2024-37879
Improper input validation in /admin/config/save in User-friendly SVN USVN before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo"...
CVE-2024-37879
CVE-2024-37879 affects User-friendly SVN (USVN) prior to v1.0.12. The issue is due to improper input validation in the /admin/config/save endpoint, allowing an administrator to execute arbitrary code via the fields: siteTitle, siteIco, and siteLogo. Impact is described as arbitrary code execution...
CVE-2024-37879
Improper input validation in /admin/config/save in User-friendly SVN USVN before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo"...
MegaSys Computer Technologies Telenium Online Web Application (Update A)
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : MegaSys Computer Technologies Equipment : Telenium Online Web Application Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could...
SUSE SLES15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2024:3295-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3295-1 advisory. - Dropped support for libmfx to fix the following CVEs: libmfx: improper input validation CVE-2023-48368, bsc1226897 libmfx: improp...
SUSE: Security Advisory (SUSE-SU-2024:3295-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...