12257 matches found
PT-2022-11827
Name of the Vulnerable Software and Affected Versions Crisp Live Chat WordPress plugin versions up to, and including 0.31 Description The issue is related to Cross-Site Request Forgery due to missing nonce validation via the crisp plugin settings page function found in the /crisp.php file. This...
CVE-2022-0253
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2022-0226
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2022-0231
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Description A CSRF issue is found in the SettingsLive help configurationCanned Messages. It was found that no CSRF token validation is getting done as no CSRF token is getting passed with the request. Also while generating statistics, the action is done through GET method with no CSRF token. Two...
livehelperchat 跨站请求伪造漏洞
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, which stems from a WEB application that does not adequately validate that a request is coming from a trusted...
CVE-2022-0014
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory such as C:\ to store a program that can then be unintentionally executed by another local user when that user utilizes ...
Design/Logic Flaw
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory such as C:\ to store a program that can then be unintentionally executed by another local user when that user utilizes ...
CVE-2022-0014
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory such as C:\ to store a program that can then be unintentionally executed by another local user when that user utilizes ...
Cortex XDR Agent: Unintended Program Execution When Using Live Terminal Session
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory such as C:\ to store a program that can then be unintentionally executed by another local user when that user utilizes ...
PT-2022-12951
Name of the Vulnerable Software and Affected Versions Cortex XDR agent versions prior to 5.0.12 Cortex XDR agent versions prior to 6.1.9 Cortex XDR agent versions prior to 7.2.4 Cortex XDR agent versions prior to 7.3.2 Description An untrusted search path issue exists in the Palo Alto Networks...
Palo Alto Networks Cortex XDR 代码问题漏洞
Palo Alto Networks Cortex XDR is a security operations platform for remote endpoint-based detection from Palo Alto Networks Malaysia. A code issue vulnerability exists in the Palo Alto Networks Cortex XDR agent that can be exploited by an attacker to execute a live endpoint session used by a loca...
CVE-2022-0014: Untrusted Search Path
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory such as C:\ to store a program that can then be unintentionally executed by another local user when that user utilizes ...
livehelperchat Information Disclosure Vulnerability
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. An information disclosure vulnerability exists in livehelperchat that stems from the inclusion of sensitive information when generating error messages. An attacker may exploit thi...
CVE-2022-0083
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...
livehelperchat 安全漏洞
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. An information disclosure vulnerability exists in livehelperchat that stems from the inclusion of sensitive information when generating error messages. An attacker may exploit thi...
livehelperchat cross-site scripting vulnerability (CNVD-2022-01685)
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...
CVE-2021-4175
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-4176
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
livehelperchat 跨站脚本漏洞
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...