5378 matches found
CVE-2024-49276 WordPress Clio Grow plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cliogrow Clio Grow clio-grow-form allows Reflected XSS.This issue affects Clio Grow: from n/a through = 1.0.2...
CVE-2024-49276
CVE-2024-49276 affects Themis Solutions, Inc. Clio Grow WordPress plugin (Clio Grow Form) with Reflected XSS in input handling. Impact is High (CVSS 3.1 base score 7.1) and affects versions 1.0.2 and earlier. The vulnerability arises from improper input neutralization during Web Page Generation. ...
CVE-2024-48023
CVE-2024-48023 is a Reflected XSS in the WordPress plugin Restaurant Reservations Widget (versions <= 1.0). The vulnerability stems from improper neutralization of input during web page generation, enabling Reflected XSS as described in multiple sources. The affected product is the Restaurant ...
CVE-2018-25105
The File Manager plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the /inc/root.php file in versions up to, and including, 3.0. This makes it possible for unauthenticated attackers to download arbitrary files from the server and upload arbitrary file...
WordPress plugin File Manager 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
Qnap QTS OS Command Injection (CVE-2021-28800)
A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.3.6.1663 Build 2021050...
VulnCheck KEV: CVE-2018-25105
The File Manager plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the /inc/root.php file in versions up to, and including, 3.0. This makes it possible for unauthenticated attackers to download arbitrary files from the server and upload arbitrary...
CVE-2024-48799
An issue in LOREX TECHNOLOGY INC com.lorexcorp.lorexping 1.4.22 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48799
An issue in LOREX TECHNOLOGY INC com.lorexcorp.lorexping 1.4.22 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48799
CVE-2024-48799 affects Lorex Technology Inc. com.lorexcorp.lorexping version 1.4.22. The issue is that a remote attacker can obtain sensitive information through the firmware update process. The advisory combines public records across multiple sources (NVD, Red Hat, CNNVD, CVE list, PT Security) ...
CVE-2024-48799
An issue in LOREX TECHNOLOGY INC com.lorexcorp.lorexping 1.4.22 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48786
The CVE-2024-48786 entry concerns SWITCHBOT SwitchBot (com.theswitchbot.switchbot) 5.0.4. The issue, described across multiple sources, allows a remote attacker to obtain sensitive information through the firmware update process. The reported impact is primarily confidentiality (C:H, I:H) with no...
CVE-2024-48786
An issue in SWITCHBOT INC SwitchBot com.theswitchbot.switchbot 5.0.4 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-48786
An issue in SWITCHBOT INC SwitchBot com.theswitchbot.switchbot 5.0.4 allows a remote attacker to obtain sensitive information via the firmware update process...
CVE-2024-47623
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Gallery Lightbox gallery-lightbox-slider allows Stored XSS.This issue affects Gallery Lightbox: from n/a through = 1.0.0.39...
CVE-2024-47623 WordPress Gallery Lightbox plugin <= 1.0.0.39 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in GhozyLab, Inc. Gallery Lightbox allows Stored XSS.This issue affects Gallery Lightbox: from n/a through 1.0.0.39...
AIM Detection
An AIM Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'xcompat.inc'; if description scriptid208127; scriptversion"1.5";...
Subnet Solutions Inc. PowerSYSTEM Center
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Subnet Solutions Inc. Equipment: PowerSYSTEM Center Vulnerabilities: Server-Side Request Forgery SSRF, Inefficient Regular Expression Complexity, Cross-Site Request Forgery CSRF 2. RISK...
[SECURITY] Fedora 40 Update: cups-2.4.10-7.fc40
CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...
[SECURITY] Fedora 39 Update: cups-2.4.10-7.fc39
CUPS printing system provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...