WordPress plugin Zotpress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2024-32609 · Unknown · Jeg Elementor Kit

Name of the Vulnerable Software and Affected Versions: Jeg Elementor Kit versions through 2.6.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This problem allows for Stored XSS, which means an attacker can...

Microchip TimeProvider 4100 安全漏洞

Microchip TimeProvider 4100 is a gateway clock from Microchip, Inc. A security vulnerability exists in Microchip TimeProvider 4100 versions prior to 2.4.7, which arises from improper input neutralization during web page generation and is susceptible to cross-site scripting attacks...

USN-7047-1 knot-resolver vulnerabilities

Vladimír Čunát discovered that Knot Resolver incorrectly handled input during DNSSEC validation. A remote attacker could possibly use this issue to bypass certain validations. CVE-2019-10190 Vladimír Čunát discovered that Knot Resolver incorrectly handled input during DNSSEC validation. A remote...

The vulnerability of the Webmin control panel in hosting systems stems from improper handling of input data during the generation of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Webmin control panel involves the elimination of input data during the generation of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by injecting specially created malicious content...

Exnet Informatics Software Ferry Reservation System SQL注入漏洞

Exnet Informatics Software Ferry Reservation System is a ferry reservation system from Exnet Informatics Software. An SQL injection vulnerability exists in previous versions of Exnet Informatics Software Ferry Reservation System 240805-002, which stems from improper neutralization of special...

XML External Entity (XXE)

kimai/kimai is vulnerable to XML External Entity XXE. The vulnerability is due to improper handling of XML input, specifically failing to securely process external entities within XML documents, allowing an attacker to inject malicious XML content...

CVE-2024-43993

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Liquido allows Stored XSS.This issue affects Liquido: from n/a through 1.0.1.2...

CVE-2024-43971

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Sunshine Sunshine Photo Cart allows Reflected XSS.This issue affects Sunshine Photo Cart: from n/a through 3.2.5...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly handling user input...

Eliz Panel 跨站脚本漏洞

Eliz Panel is a control panel from Eliz, Inc. A cross-site scripting vulnerability exists in Eliz Panel versions prior to 2.3.24, which stems from incorrect neutralization of inputs during web page generation, allowing stored cross-site scripting attacks...

UBUNTU-CVE-2024-38860

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...

USN-7010-1 dcmtk vulnerabilities

Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS...

USN-7010-1: DCMTK vulnerabilities

Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS...

PT-2024-28242 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0p16 Checkmk versions prior to 2.2.0p34 Description: The issue is related to improper neutralization of input, allowing attackers to craft malicious links that can facilitate phishing attacks. Recommendations: Fo...

WordPress plugin Spiffy Calendar SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

PT-2024-30914 · Idx Broker · Idx Broker Impress

Name of the Vulnerable Software and Affected Versions: IDX Broker IMPress for IDX Broker versions n/a through 3.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...

PT-2024-30838 · Highwarden · Highwarden Super Store Finder

Name of the Vulnerable Software and Affected Versions: highwarden Super Store Finder versions n/a through 6.9.7 Description: The issue affects highwarden Super Store Finder, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. This enables attacker...

Veribilim Veribase Order 安全漏洞

Veribilim Veribase Order is an application from Veribilim, Inc. A security vulnerability exists in Veribilim Veribase Order prior to v4.010.3, which stems from an improper neutralization of inputs during web page generation, resulting in a cross-site scripting vulnerability...

CVE-2024-44057

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CryoutCreations Nirvana allows Stored XSS.This issue affects Nirvana: from n/a through 1.6.3...