CVE-2024-1153

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68...

CVE-2024-21520

Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting XSS via the breaklongheaders template filter due to improper input sanitization before splitting and joining with tags...

WordPress theme Anima cross-site scripting vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blogs on PHP and MySQL servers.WordPress theme is a theme for WordPress. A cross-site scripting vulnerability exists in WordPress theme Anima version 1.4.1 and prior versions, which stems...

CVE-2024-5990

CVE-2024-5990 affects Rockwell Automation ThinManager ThinServer, where an improper input validation allows an unauthenticated actor to send a malicious message to a monitor thread and trigger a denial-of-service condition. Affected ThinServer versions include 11.1.x before 11.1.8, 11.2.x before ...

CVE-2024-5989

Rockwell Automation ThinManager ThinServer is affected by CVE-2024-5989 (improper input validation) enabling an unauthenticated threat actor to send a malicious message that could trigger SQL injection and remote code execution. Affects ThinManager ThinServer versions 11.1.x up to 11.1.0–11.1.8, ...

CVE-2024-5989 Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™...

CVE-2024-5988

The Rockwell Automation ThinManager ThinServer is affected by multiple input-validation vulnerabilities (CVE-2024-5988, -5989, -5990). Affected products include ThinManager ThinServer versions 11.1.x through 13.x (specific ranges listed for each CVE). An unauthenticated threat actor can send a ma...

CVE-2024-4196 Avaya IP Office Web Control RCE Vulnerability

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1...

CVE-2024-4196

CVE-2024-4196 – Avaya IP Office Web Control RPC/RCE issue. The vulnerability stems from improper input validation in the Web Control component of Avaya IP Office, enabling remote code execution via a crafted web request. Affected products: Avaya IP Office (Web Control) prior to version 11.1.3.1. ...

Rockwell Automation ThinManager ThinServer Improper Input Validation (CVE-2024-5990)

The version of Rockwell Automation ThinManager ThinServer installed on the remote host is 11.1.x prior to 11.1.8, 11.2.x prior to 11.2.9, 12.0.x prior to 12.0.7, 12.1.x prior to 12.1.8, 13.0.x prior to 13.0.4, 13.1.x prior to 13.1.2. It is therefore, affected by an improper input validation...

Rockwell Automation ThinManager ThinServer SD1677 Multiple Vulnerabilites

The version of Rockwell Automation ThinManager ThinServer installed on the remote host is 11.1.x prior to 11.1.8, 11.2.x prior to 11.2.9, 12.0.x prior to 12.0.7, 12.1.x prior to 12.1.8, 13.0.x prior to 13.0.5, 13.1.x prior to 13.1.3 or 13.2.x prior to 13.2.2. It is therefore, affected by mutliple...

PT-2024-29663

Name of the Vulnerable Software and Affected Versions Avaya IP Office versions prior to 11.1.3.1 Description An improper input validation issue was discovered in Avaya IP Office, allowing remote command or code execution via a specially crafted web request to the Web Control component...

SUSE CVE-2023-48368

Improper input validation in IntelR Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access...

WordPress plugin Consulting Elementor Widgets OS Command Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An operating system command...

Next4Biz Cross-Site Scripting Vulnerability

Next4Biz is a marketing and sales management software from Next4Biz, Inc. A cross-site scripting vulnerability exists in Next4Biz versions 6.6.4.4 through prior to 6.6.4.5, which stems from improper neutralization of input during web page generation...

PT-2024-29594 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to an Improper Input Validation that could lead to a security feature bypass. A low-privileged attacker could leverage this to bypass security measures and...

OpenCart 安全漏洞

OpenCart is an open source online store management system for creating and managing e-commerce websites. It is known for its user-friendliness and flexibility for online stores of different sizes. OpenCart suffers from a cross-site scripting vulnerability that stems from insufficient input cleanu...

CVE-2024-35766

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ollybach WPPizza allows Reflected XSS.This issue affects WPPizza: from n/a through 3.18.13...

CVE-2024-3036

Improper Input Validation vulnerability in ABB 800xA Base. An attacker who successfully exploited this vulnerability could cause services to crash by sending specifically crafted messages. This issue affects 800xA Base: from 6.0.0 through 6.1.1-2...

CVE-2024-3036 Communication DoS vulnerability

Improper Input Validation vulnerability in ABB 800xA Base. An attacker who successfully exploited this vulnerability could cause services to crash by sending specifically crafted messages. This issue affects 800xA Base: from 6.0.0 through 6.1.1-2...