CVE-2023-46204

The CVE-2023-46204 entry concerns the WordPress plugin Duplicate Theme by Muller Digital Inc. (versions

Advisory ROSA-SA-2023-2261

software: mujs 1.3.3 AXIS: ROSA-CHROME packageevrstring: mujs-1.3.3.3-1.src.rpm CVE-ID: CVE-2016-10141 BDU-ID: None CVE-Crit: CRITICAL CVE-DESC.: An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS to...

CVE-2023-45641

Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...

CVE-2023-45641 WordPress Caret Country Access Limit Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...

CVE-2023-45641

CVE-2023-45641 affects the Caret Country Access Limit WordPress plugin (

CVE-2023-21413

GoSecure on behalf of Genetec Inc. has found a flaw that allows for a remote code execution during the installation of ACAP applications on the Axis device. The application handling service in AXIS OS was vulnerable to command injection allowing an attacker to run arbitrary code. Axis has release...

Command injection

GoSecure on behalf of Genetec Inc. has found a flaw that allows for a remote code execution during the installation of ACAP applications on the Axis device. The application handling service in AXIS OS was vulnerable to command injection allowing an attacker to run arbitrary code. Axis has release...

CVE-2023-21413 Remote code execution vulnerability during the installation of ACAP applications on the Axis device

GoSecure on behalf of Genetec Inc. has found a flaw that allows for a remote code execution during the installation of ACAP applications on the Axis device. The application handling service in AXIS OS was vulnerable to command injection allowing an attacker to run arbitrary code. Axis has release...

CVE-2023-21413

The CVE-2023-21413 vulnerability affects Axis OS on Axis devices, where the ACAP application installation process is vulnerable to command injection in the application handling service. This enables remote code execution (RCE) if an attacker can leverage the installation flow. Public risk scores ...

Ubuntu 22.04 ESM : iperf3 vulnerability (USN-6431-3)

The remote Ubuntu 22.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6431-3 advisory. USN-6431-1 fixed a vulnerability in iperf3. This update provides the corresponding update for Ubuntu 22.04 LTS. Tenable has extracted the preceding description...

Design/Logic Flaw

An issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows a remote attacker to obtain sensitive information via the TACACS+ server component...

CVE-2023-44037

CVE-2023-44037 concerns ZPE Systems Nodegrid OS, affecting versions 5.8.10–5.8.13 and 5.10.3–5.10.5. The issue originates in the TACACS+ server component and enables a remote attacker to obtain sensitive information. Public sources in the connected set specify the affected ranges and describe the...

CVE-2023-45047

Cross-Site Request Forgery CSRF vulnerability in LeadSquared, Inc LeadSquared Suite plugin = 0.7.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in LeadSquared, Inc LeadSquared Suite plugin = 0.7.4 versions...

CVE-2023-45047

LeadSquared Suite WordPress plugin vulnerable to CSRF (CVE-2023-45047) in versions &lt;= 0.7.4. Root cause: Cross-Site Request Forgery that could enable unauthenticated or unintended actions within affected sites. Open sources consistently reference LeadSquared Suite

Fedora: Security Advisory for cups (FEDORA-2023-904f92af98)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-44146

Cross-Site Request Forgery CSRF vulnerability in Checkfront Inc. Checkfront Online Booking System plugin = 3.6 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Checkfront Inc. Checkfront Online Booking System plugin = 3.6 versions...

CVE-2023-44146

The CVE-2023-44146 entry concerns the WordPress plugin Checkfront Online Booking System, affected in versions ≤ 3.6. The vulnerability is Cross-Site Request Forgery (CSRF) impacting settings updates. Patch guidance from PatchStack indicates the fix is in version 3.7, with exploitation deemed unli...