CVE-2023-3122 GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email

The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 3.9.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

WordPress Plugin GD Mail Queue 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2023-3845 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint Server, allowing a remote attacker to execute arbitrary code. This can affect the system...

PT-2023-3535 · Unknown · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to insufficient input validation in the Raw Image Extension plugin. Exploitation of this issue may allow an attacker to execute arbitrary code by sending a...

PT-2023-3817 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the HTTP.sys driver of the Windows operating system. This can be exploited by a remote attacker to cause a denial of service...

PT-2023-3915 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is...

PT-2023-3540 · Microsoft · Activex +1

Name of the Vulnerable Software and Affected Versions: Microsoft ActiveX affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft ActiveX component, which can be exploited to execute arbitrary code on the target system by using a speciall...

PT-2023-3905 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Excel. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At the moment,...

PT-2023-3684 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Message Queuing MSMQ for Microsoft Windows operating systems. This can be exploited by a remote...

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-2-1581

2.1581 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

Cisco BroadWorks Privilege Escalation Vulnerability

A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device. The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted...

PT-2023-5201 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM version 7.5.0 Description: The issue exists due to insufficient input validation, allowing a remote attacker to perform administrative actions. An authenticated user may be able to perform unauthorized actions. Recommendations...

The vulnerability of the Microsoft .NET Framework software, related to insufficient validation of input data, allows a perpetrator to cause service failures.

The vulnerability of the Microsoft .NET Framework software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using specially created data...

The vulnerability of the Windows Hyper-V hardware virtualization system allows a attacker to trigger a service failure.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using specially created data...

PT-2023-6762 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge, allowing an attacker to execute arbitrary code. Recommendations: At the moment, there is no information about...

PT-2023-4546 · Node.Js +10 · Node.Js +10

Name of the Vulnerable Software and Affected Versions: Node.js versions v16, v18, and v20 Description: The issue is related to insufficient input validation in the crypto.X509Certificate function. When an invalid public key is used to create an x509 certificate, a non-expected termination occurs,...

PT-2023-3447 · Microsoft · Odbc Driver For Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft ODBC Driver for SQL Server library, which can allow an attacker to execute arbitrary code...

WordPress FiboSearch Plugin < 1.24.0 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:fibosearch:fibosearch"; if description...

PT-2023-3356 · Microsoft · Windows Remote Desktop Client +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Client affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Remote Desktop Client. It allows remote attackers to execute arbitrary code on the system...