774 matches found
CVE-2024-4211
CVE-2024-4211 affects OpenText Application Automation Tools (v24.1.0 and below). Root cause: improper validation of input quantity coupled with multiple missing permission checks in ALM job configuration. Impact: users with Overall/Read permission could enumerate ALM server names, usernames and c...
Arbitrary Argument Injection
ggit is vulnerable to Arbitrary Argument Injection. The vulnerability is due to the failure to sanitize user input and improper handling of command-line flags and doesn't validate the URL scheme or properly pass arguments to the git binary using the necessary -- POSIX characters, allowing attacke...
Siemens SINEC Security Monitor 安全漏洞
SINEC Security Monitor is a modular network security software for passive, non-intrusive, continuous network security monitoring during production processes at customer sites. Siemens SINEC Security Monitor suffers from a command injection vulnerability that originates from a failure to properly...
CVE-2024-44001
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Royal Royal Elementor Addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.3.982...
CVE-2021-22503
Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.3.0000...
CVE-2021-22503 Improper Neutralization of Input During Web Page Generation Vulnerability
Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.3.0000...
CVE-2021-22503
CVE-2021-22503 corresponds to a vulnerability in OpenText eDirectory 9.2.3.0000 related to improper neutralization of input during web page generation. Multiple sources (NVD, Red Hat advisory) describe the issue as affecting eDirectory and provide CVSS metrics: NETWORK attack, LOW to MEDIUM impac...
CVE-2024-45008
In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at inputmtinitslots, for numslots is supplied from userspace using ioctlUIDEVCREATE. Since nobody knows possible max slots, this patch chose 1024...
CVE-2024-42698
Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...
CVE-2024-41174
The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker...
CVE-2024-43317
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Metagauss User Registration Team RegistrationMagic allows Cross-Site Scripting XSS.This issue affects RegistrationMagic: from n/a through 6.0.1.0...
CVE-2024-43291
CVE-2024-43291 affects Void Contact Form 7 Widget For Elementor Page Builder. Vulnerability: improper input neutralization during web page generation enabling Stored XSS in the plugin. Affected: Void Contact Form 7 Widget For Elementor Page Builder from n/a up to version 2.4.1. Impact (as stated)...
Online Blood Bank Management System user parameter cross-site scripting vulnerability
Online Blood Bank Management System is an online blood bank management system. Online Blood Bank Management System version 1.0 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by parameter user, which can be...
CVE-2024-41116
CVE-2024-41116 affects streamlit-geospatial. Prior to commit c4f81d9616d40c60584e36abb15300853a66e489, the vis_params variable in pages/1_📷_Timelapse.py accepts user input and is subsequently used in eval(), enabling remote code execution. The commit cited fixes this issue. Several records (NVD, ...
HMS Networks Anybus-CompactCom 30 跨站脚本漏洞
HMS Networks Anybus-CompactCom 30 is a Bluetooth module from the Swedish company HMS Networks. It is used as a physical layer converter for Bluetooth communication. A cross-site scripting vulnerability exists in HMS Networks Anybus-CompactCom 30, which stems from a lack of checks against user...
CVE-2024-38720
CVE-2024-38720 is a WordPress plugin vulnerability in EazyDocs (
CVE-2024-39538
Junos OS Evolved on ACX7000 Series is affected by CVE-2024-39538 due to a Buffer Copy without Checking Size of Input in evo-pfemand (PFE management daemon). An unauthenticated, adjacent attacker can cause a Denial-of-Service by sending multicast traffic with a specific (S,G); evo-pfemand crashes,...
CVE-2024-4638
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized...
CVE-2024-35762
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4...
