Design/Logic Flaw

The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read/write access to craft malicious Analyst files. A successful attack using this...

CVE-2023-34179

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Inc. Groundhogg allows SQL Injection.This issue affects Groundhogg: from n/a through 2.7.11...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Groundhogg Inc. Groundhogg allows SQL Injection.This issue affects Groundhogg: from n/a through 2.7.11...

CVE-2023-34179

CVE-2023-34179 : Groundhogg WordPress plugin (≤ 2.7.11) is vulnerable to SQL Injection due to improper neutralization of input. Impact per sources includes potential unauthorized data access with high impact; exploitation details are not provided in the documents. Patch recommended: upgrade to 2....

CVE-2023-40681

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Groundhogg Inc. Groundhogg plugin = 2.7.11.10 versions...

CVE-2023-40681

CVE-2023-40681 is a stored XSS vulnerability in Groundhogg WordPress plugin (versions

JVN#94132951: Cybozu Remote Service vulnerable to uncontrolled resource consumption

Cybozu Remote Service provided by Cybozu, Inc. is vulnerable to uncontrolled resource consumption CWE-400. Impact Certain operations performed by a logged-in user may lead to huge storage space consumption or significantly delayed communication. Solution Update the Software Update the software to...

Command injection

ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/...

CVE-2023-43322

CVE-2023-43322 affects ZPE Systems Nodegrid OS versions 5.0.0–5.0.17, 5.2.0–5.2.19, 5.4.0–5.4.16, 5.6.0–5.6.13, 5.8.0–5.8.10, and 5.10.0–5.10.3, with a command injection via /v1/system/toolkit/files/. Root cause: command injection; CVSS v3.1 base score 8.8 (HIGH) with NETWORK attack vector, LOW a...

Command Injection Vulnerability in Cisco IOS XE

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity. Cisco IOS XE suffers from a command injection vulnerability that stems from insufficie...

GHSA-GGJ4-78RM-6XGV baserCMS Cross-site Scripting vulnerability in File upload Feature

There is a XSS Vulnerability in File upload Feature to baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS 4.7.8 and earlier...

CVE-2023-46204

Cross-Site Request Forgery CSRF vulnerability in Muller Digital Inc. Duplicate Theme plugin = 0.1.6 versions...

CVE-2023-46204

Cross-Site Request Forgery CSRF vulnerability in Muller Digital Inc. Duplicate Theme plugin = 0.1.6 versions...

CVE-2023-26219

The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent contain a vulnerability that theoretically allows an attacker with access to the Hawk Console’s and...

Design/Logic Flaw

The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent contain a vulnerability that theoretically allows an attacker with access to the Hawk Console’s and...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Muller Digital Inc. Duplicate Theme plugin = 0.1.6 versions...

acclaimsoftwareinc.com Cross Site Scripting vulnerability OBB-3765289

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-26219 TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability

The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence Hawk RedTail, and TIBCO Runtime Agent contain a vulnerability that theoretically allows an attacker with access to the Hawk Console’s and...

CVE-2023-26219

The CVE-2023-26219 issue affects TIBCO Hawk family components: TIBCO Hawk, Hawk Distribution for Silver Fabric, Operational Intelligence Hawk RedTail, and Runtime Agent. The vulnerability allows an attacker who can read the Hawk Console/Agent logs to obtain credentials used to access EMS servers....

CVE-2023-46204 WordPress Duplicate Theme Plugin <= 0.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Muller Digital Inc. Duplicate Theme plugin = 0.1.6 versions...