4775 matches found
The vulnerability of the TCP/IP protocol implementation in the Windows operating system allows a hacker to cause a service failure.
The vulnerability of the TCP/IP protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of Windows operating systems’ message queues allows attackers to induce service failures.
The vulnerability of Windows operating systems’ message queues is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
PT-2023-6134 · Juniper Networks · Junos
Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S8 Junos OS versions 21.1R1 through 21.2R3-S6 Junos OS versions prior to 21.3R3-S5 Junos OS versions prior to 21.4R3-S4 Junos OS versions prior to 22.1R3-S3 Junos OS versions prior to 22.2R3-S1 Junos OS...
PT-2023-5975 · Microsoft · Message Queuing +1
Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ versions affected versions not specified Description: The issue is related to insufficient input validation in the Message Queuing component of Windows operating systems. It allows a remote attacker to cause a...
PT-2023-5942 · Microsoft +1 · Quic +2
Name of the Vulnerable Software and Affected Versions: Microsoft QUIC affected versions not specified Description: The issue is related to insufficient input validation in the implementation of the QUIC network protocol in the Windows operating system. This can be exploited by a remote attacker t...
PT-2023-6072 · Microsoft · Message Queuing +1
Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in the Message Queuing component of Windows operating systems. It allows remote attackers to execute arbitrary...
PT-2023-6166 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows TCP/IP protocol implementation. This can be exploited by a remote attacker to cause a denial of service. Recommendations...
PT-2023-6060 · Microsoft · Virtual Trusted Platform Module +1
Name of the Vulnerable Software and Affected Versions: Microsoft Virtual Trusted Platform Module affected versions not specified Description: The issue is related to insufficient input validation in the virtual trusted platform module of Windows operating systems. This can be exploited by attacke...
PT-2023-6055 · Microsoft · Message Queuing +1
Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ versions affected versions not specified Description: The issue is related to insufficient input validation in the Message Queuing component of the Windows operating system. This allows a remote attacker to...
PT-2023-6044 · Microsoft · Odbc Driver For Sql Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft ODBC Driver for SQL Server. This can allow an attacker to execute arbitrary code...
PT-2023-6153 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Setup Files Cleanup component. It allows remote attackers to execute arbitrary code on the system...
CVE-2023-5357
The Instagram for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
CVE-2023-5357 Instagram for WordPress <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Instagram for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
The vulnerability of the imgsys component in MediaTek’s microprogramming software allows attackers to enhance their privileges.
The vulnerability of the imgsys microprogramming system component of MediaTek’s chips is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2023-5334
The WP Responsive header image slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'spresponsiveslider' shortcode in versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress Slide Anything Plugin < 2.4.9 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:slideanythingproject:slideanything"; ifdescription...
CVE-2023-5230
The TM WooCommerce Compare & Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tmwoowishlisttable' shortcode in versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
Cross site scripting
The Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fawesome' shortcode in versions up to, and including, 5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...
CVE-2023-5233 Font Awesome Integration <= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fawesome' shortcode in versions up to, and including, 5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...
CVE-2023-5232 Font Awesome More Icons <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Font Awesome More Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' shortcode in versions up to, and including, 3.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...