11514 matches found
PT-2024-20603 · Unknown · Audrasjb Gdpr Data Request Form
Name of the Vulnerable Software and Affected Versions: Audrasjb GDPR Data Request Form versions n/a through 1.6 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can inject...
PT-2024-20635 · Unknown · Yannick Lefebvre Link Library
Name of the Vulnerable Software and Affected Versions: Yannick Lefebvre Link Library versions n/a through 7.5.13 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: For...
follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse()
An Improper Input Validation flaw was found in follow-redirects due to the improper handling of URLs by the url.parse function. When a new URL throws an error, it can be manipulated to misinterpret the hostname. This issue could allow an attacker to redirect traffic to a malicious site, potential...
CVE-2024-22238
Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile configurations due to improper input sanitization...
Cross Site Scripting (XSS)
stimulsoft-dashboards-js is vulnerable to Cross Site Scripting. The vulnerability is due to improper input validation in the search bar component, allowing a remote attacker to execute arbitrary code via a crafted payload...
Denial Of Service (DoS)
graphql-go is vulnerable to Uncontrolled Recursion. The vulnerability is caused due to improper malformed input checks within parser.go, which results in Denial Of ServiceDoS...
Improper Input Validation
github.com/consensys/gnark is vulnerable to Improper Input Validation. The vulnerability is due to a lack of width validation in the range checker gadget. The Range checker allows inputs to be up to 16 bits wider than checked...
CVE-2024-20820
The CVE-2024-20820 entry refers to improper input validation in the bootloader of Samsung mobile devices, allowing local privileged attackers to trigger an out-of-bounds read. Affected software is the bootloader prior to SMR Feb-2024 Release 1. Documented impact includes confidentiality and avail...
CVE-2024-20820
Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read...
VulnCheck KEV: CVE-2023-3710
Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 e.g. P10.19.050006...
CVE-2024-24846
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MightyThemes Mighty Addons for Elementor allows Reflected XSS.This issue affects Mighty Addons for Elementor: from n/a through 1.9.3...
The vulnerability of the Rapid SCADA system, related to the use of open redirection, allows a hacker to redirect a user to any arbitrary URL address.
The vulnerability of the SCADA system Rapid SCADA is related to the use of open redirection as a result of incorrect data cleaning on the user input page. Exploiting this vulnerability allows an attacker to redirect the user to any desired URL address...
MediaTek Chip Security Breach
MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from an improper input validation issue in the Modem NL1 module, which may cause a system crash...
MediaTek Chip Security Breach
MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from an improper input validation issue in the Modem NL1 module, which may cause a system crash...
PT-2024-20605 · Unknown · Five Star Restaurant Reviews
Name of the Vulnerable Software and Affected Versions: Five Star Restaurant Reviews versions prior to 2.3.6 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means an attacker can inject malicious...
PT-2024-20613 · Elementor · Mighty Addons For Elementor
Name of the Vulnerable Software and Affected Versions: Mighty Addons for Elementor versions 1.9.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attack...
CVE-2023-6673
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in National Keep Cyber Security Services CyberMath allows Reflected XSS. This issue affects CyberMath: from v.1.4 before v.1.5...
CVE-2024-21863
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input...