Eliz Panel 跨站脚本漏洞

Eliz Panel is a control panel from Eliz, Inc. A cross-site scripting vulnerability exists in Eliz Panel versions prior to 2.3.24, which stems from incorrect neutralization of inputs during web page generation, allowing stored cross-site scripting attacks...

UBUNTU-CVE-2024-38860

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...

USN-7010-1 dcmtk vulnerabilities

Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS...

USN-7010-1: DCMTK vulnerabilities

Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS...

PT-2024-28242 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0p16 Checkmk versions prior to 2.2.0p34 Description: The issue is related to improper neutralization of input, allowing attackers to craft malicious links that can facilitate phishing attacks. Recommendations: Fo...

PT-2024-30914 · Idx Broker · Idx Broker Impress

Name of the Vulnerable Software and Affected Versions: IDX Broker IMPress for IDX Broker versions n/a through 3.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2024-30838 · Highwarden · Highwarden Super Store Finder

Name of the Vulnerable Software and Affected Versions: highwarden Super Store Finder versions n/a through 6.9.7 Description: The issue affects highwarden Super Store Finder, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. This enables attacker...

WordPress plugin Spiffy Calendar SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

Veribilim Veribase Order 安全漏洞

Veribilim Veribase Order is an application from Veribilim, Inc. A security vulnerability exists in Veribilim Veribase Order prior to v4.010.3, which stems from an improper neutralization of inputs during web page generation, resulting in a cross-site scripting vulnerability...

CVE-2024-44057

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Nirvana allows Stored XSS.This issue affects Nirvana: from n/a through 1.6.3...

CVE-2024-44056

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Mantra allows Stored XSS.This issue affects Mantra: from n/a through 3.3.2...

PT-2024-31645 · Joomunited · Wp Meta Seo

Name of the Vulnerable Software and Affected Versions: JoomUnited WP Meta SEO versions through 4.5.13 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that an attacker can...

Eaton Foreseer EPMS 安全漏洞

Eaton Foreseer EPMS is a highly customizable web-based software platform from Eaton Corporation. A security vulnerability exists in Eaton Foreseer EPMS versions prior to 7.8.600, which stems from improper server-side input cleanup, leading to the injection and execution of malicious scripts...

Remote Code Execution (RCE)

Express.js is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient validation or handling of user input when passed to response.redirect, allowing untrusted code to be executed despite sanitization efforts...

Remote Code Execution (RCE)

dtale is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling or validation of user input in the "Custom Filter" feature using the getstrarg method, allowing malicious code to be executed on the server...

Controller 6000和Controller 7000 安全漏洞

The Gallagher Controller 6000 and Gallagher Controller 7000 are both products of Gallagher New Zealand.The Gallagher Controller 6000 is an interface between a Gallagher Command Center server and distributed field hardware. The Gallagher Controller 7000 is a powerful network connected controller. ...

Exploit for Improper Privilege Management in Enlightenment

CVE-2022-37706 The CVE-2022-37706 vulnerability is relate...

PT-2024-8122 · Unknown · Power Scada Operation +2

Name of the Vulnerable Software and Affected Versions: Power Monitoring Expert, Power Operation, Power SCADA Operation affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. This...

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system by the individual developers of stemword. A cross-site scripting vulnerability exists in Inventory Management System version 1.0, which stems from a cross-site scripting attack caused by incorrect manipulation of the input alert1...

CVE-2024-45008

In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at inputmtinitslots, for numslots is supplied from userspace using ioctlUIDEVCREATE. Since nobody knows possible max slots, this patch chose 1024...