CVE-2023-6518

CVE-2023-6518 : A plaintext password storage flaw in Mia Technology Inc.’s MIA-MED prior to 1.0.7 allows reading sensitive strings from the executable, compromising confidentiality. Affected product: MIA-MED (pre-1.0.7). Root cause: plaintext password storage. Impact: high confidentiality risk; n...

CVE-2023-6517

CVE-2023-6517 affects Mia Technology’s MIA-MED prior to 1.0.7, where incompatible data handling policies permit collection of data provided by users, leading to exposure of sensitive information. The NVD entry cites a CVSS 3.1 base score of 7.5 (HIGH impact) with NETWORK attack vector, no user in...

CVE-2023-6515

Authorization Bypass Through User-Controlled Key vulnerability in Mia Technology Inc. MİA-MED allows Authentication Abuse. This issue affects MİA-MED: before 1.0.7...

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in Mia Technology Inc. MIA-MED allows Authentication Abuse.This issue affects MIA-MED: before 1.0.7...

CVE-2023-6515

CVE-2023-6515 concerns Mia Technology Inc. MIA-MED prior to 1.0.7, with an Authorization Bypass Through User-Controlled Key that enables Authentication Abuse. The vulnerability is described across multiple sources as a user-controlled key bypass that could allow bypassing authentication and gaini...

Qolsys IQ Panel 4, IQ4 HUB

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION : Low attack complexity Vendor : Qolsys, Inc. Equipment : IQ Panel 4, IQ4 Hub Vulnerability : Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of this vulnerability could allow the panel...

CVE-2015-10129

CVE-2015-10129 affects planet-freo up to 20150116. A vulnerability exists in admin/inc/auth.inc.php where manipulation of the auth argument leads to an incorrect comparison. The attack could be launched remotely; exploit has been disclosed to the public. The patch is identified as 6ad38c58a45642e...

moonmoon security breach

moonmoon is a web-based aggregator similar to Planetplanet. It can be used to mix posts from different blogs with the same interests into a single page. A security vulnerability exists in moonmoon, which stems from an incorrect comparison of the auth parameter on the admin/inc/auth.inc.php page...

FacileManager Elevation of Privilege Vulnerability

facileManager is a set of modular Web applications from facileManager Inc. An elevation of privilege vulnerability exists in facileManager that stems from improper privilege management. An attacker can exploit this vulnerability to gain elevated privileges on the system...

CVE-2024-22310

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Formzu Inc. Formzu WP allows Stored XSS.This issue affects Formzu WP: from n/a through 1.6.7...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Formzu Inc. Formzu WP allows Stored XSS.This issue affects Formzu WP: from n/a through 1.6.7...

CVE-2024-22310 WordPress Formzu WP Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Formzu Inc. Formzu WP allows Stored XSS.This issue affects Formzu WP: from n/a through 1.6.7...

CVE-2024-22310

CVE-2024-22310 affects Formzu WP (WordPress plugin) up to version 1.6.7 and is caused by improper neutralization of input during web page generation, enabling Stored XSS. The vulnerability targets the plugin’s handling of user-supplied input in the WordPress pages, leading to cross-site scripting...

Path traversal

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

CVE-2023-6919 Path Traversal in VGuard IP Camera Network Recorder

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

CVE-2023-6919

CVE-2023-6919 describes a Path Traversal vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard prior to version V500.0003.R008.4011.C0012.B351.C. The flaw allows an absolute path traversal via the "/.. /filedir" payload, potentially enabling access to files outside the web root. A...

RHEL 8 : gnutls (RHSA-2024:0399)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0399 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS...

JVN#34565930: Multiple vulnerabilities in a-blog cms

a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. Improper input validation CWE-20 - CVE-2024-23180 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N| Base Score: 3.5 CVSS v2| AV:N/AC:M/Au:S/C:N/I:P/A:N| Base Score: 3.5...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress a...

CVE-2022-40700 Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins

Server-Side Request Forgery SSRF vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress a...