PT-2023-31319 · Unknown · Jeff Starr Dashboard Widgets Suite

Name of the Vulnerable Software and Affected Versions: Jeff Starr Dashboard Widgets Suite versions prior to 3.4.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

PT-2023-31368 · WordPress · Wp Photo Album Plus

Name of the Vulnerable Software and Affected Versions: WP Photo Album Plus versions through 8.5.02.005 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Overview UmbracoCms.Web is an ASP.NET CMS. Affected versions of this package are vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' via a specific part of the backoffice interface. An attacker with access to this area can inject unauthorized HTML code...

PT-2023-7752 · Fortinet · Fortisandbox

Name of the Vulnerable Software and Affected Versions: FortiSandbox versions 3.1.0 through 3.1.5 FortiSandbox versions 3.2.0 through 3.2.4 FortiSandbox versions 4.0.0 through 4.0.3 FortiSandbox versions 4.2.0 through 4.2.5 FortiSandbox version 4.4.0 FortiSandbox version 4.4.1 Description: The iss...

The vulnerability of the Telnet protocol implementation in the microprogramming-based wireless Wi-Fi routers Tenda W30E allows a hacker to execute arbitrary commands.

The vulnerability of the Telnet protocol implementation in the microprogramming-based wireless Wi-Fi routers Tenda W30E is related to the lack of measures taken to neutralize special elements during the processing of the /goform/telnet request. Exploiting this vulnerability allows a remote attack...

USN-6542-1 tinyxml vulnerability

Wang Zhong discovered that TinyXML incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service...

SONICWALL SMA100 SSL-VPN Security Vulnerability

The SonicWALL SMA100 is a secure access gateway device from SonicWALL USA. A security vulnerability exists in the SONICWALL SMA100 SSL-VPN that stems from improper neutralization of special elements...

USN-6529-1 request-tracker4 vulnerabilities

It was discovered that Request Tracker incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information. CVE-2021-38562, CVE-2022-25802, CVE-2023-41259,...

UBUNTU-CVE-2023-6033

Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, and 16.4 prior to 16.4.3 allows attacker to execute javascript in victim's browser...

CVE-2023-6033 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, and 16.4 prior to 16.4.3 allows attacker to execute javascript in victim's browser...

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab that stems from incorrect...

PT-2023-32486 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.10 through 16.4.2 GitLab CE/EE versions 16.5 through 16.5.2 GitLab CE/EE versions 16.6 through 16.6.0 Description: The issue is related to improper neutralization of input in Jira integration configuration, allowing a...

CVE-2023-47876

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Perfmatters allows Reflected XSS.This issue affects Perfmatters: from n/a through 2.1.6...

CVE-2023-47853

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in myCred myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin allows Stored XSS.This issue affects myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin: from n/a...

CVE-2023-2266

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more...

CVE-2023-44143

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns allows Stored XSS.This issue affects Bamboo Columns: from n/a through 1.6.1...

CVE-2023-48326

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager allows Reflected XSS.This issue affects Events Manager: from n/a through 6.4.5...

PT-2023-30929 · Unknown · Tripay Payment Gateway

Name of the Vulnerable Software and Affected Versions: TriPay Payment Gateway versions 3.2.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

Tenda AX1803 setSchedWifi function buffer overflow vulnerability

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in the Tenda AX1803 v1.0.0.1, which originates from a boundary error when the application handles untrusted input. The vulnerability can be exploited by an attacker to execute arbitrary code...

PT-2023-30781 · Webdorado · Web Dorado Spider Video Player

Name of the Vulnerable Software and Affected Versions: WebDorado SpiderVPlayer versions 1.5.22 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...