CVE-2023-50837

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WebFactory Ltd Login Lockdown – Protect Login Form.This issue affects Login Lockdown – Protect Login Form: from n/a through 2.06...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WebFactory Ltd Login Lockdown – Protect Login Form.This issue affects Login Lockdown – Protect Login Form: from n/a through 2.06...

CVE-2023-50837 WordPress Login Lockdown Plugin <= 2.06 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WebFactory Ltd Login Lockdown – Protect Login Form.This issue affects Login Lockdown – Protect Login Form: from n/a through 2.06...

CVE-2023-50837

CVE-2023-50837 is a SQL Injection flaw in WebFactory Login Lockdown – Protect Login Form (WordPress). Affected: Login Lockdown – Protect Login Form: n/a through 2.06. Patch status: Patched. CVSS 3.1 base score 7.2 (HIGH); attack vector: NETWORK; attack complexity: LOW; privileges required: HIGH; ...

SQL Injection Vulnerability in SpringBlade of Shanghai Breadtech Co. Ltd (CNVD-2024-0586935)

SpringBlade is a development framework based on Spring Spring SpringMVC Beetl Beetlsql Shiro . Ltd SpringBlade has a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Data Leakage Protection (DLP) System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-05880)

Data Leakage Protection DLP system is aimed at serving enterprises and institutions for data asset grooming and data security protection. Data Leakage Protection DLP system of Beijing Yisetong Technology Development Co., Ltd. suffers from SQL injection vulnerability, which can be exploited by...

CVE-2023-49763

Cross-Site Request Forgery CSRF vulnerability in Creatomatic Ltd CSprite.This issue affects CSprite: from n/a through 1.1...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Creatomatic Ltd CSprite.This issue affects CSprite: from n/a through 1.1...

CVE-2023-49763

CVE-2023-49763 : WordPress plugin CSprite (by Creatomatic) &lt;= 1.1 is vulnerable to Cross-Site Request Forgery (CSRF) . The issue is due to insufficient nonce validation, enabling unauthenticated attackers to potentially trigger actions by convincing an admin to perform a forged request. Public...

CVE-2023-49763 WordPress CSprite Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Creatomatic Ltd CSprite.This issue affects CSprite: from n/a through 1.1...

CVE-2023-49747

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebFactory Ltd Guest Author allows Stored XSS.This issue affects Guest Author: from n/a through 2.3...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebFactory Ltd Guest Author allows Stored XSS.This issue affects Guest Author: from n/a through 2.3...

CVE-2023-49747 WordPress Guest Author Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebFactory Ltd Guest Author allows Stored XSS.This issue affects Guest Author: from n/a through 2.3...

CVE-2023-49747

CVE-2023-49747 refers to a Stored XSS in the WordPress plugin Guest Author (WebFactory Ltd) up to version 2.3. The vulnerability arises from improper neutralization of input during web page generation (author name), enabling injected scripts when users view pages. Public reports from Red Hat and ...

Design/Logic Flaw

Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory...

CVE-2023-32804 Mali GPU Userspace Driver can make an Out-of-Bounds access

Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory...

CVE-2023-32804

CVE-2023-32804 describes an out-of-bounds write in Arm Mali GPU Userspace Drivers (Midgard, Bifrost, Valhall, and Arm 5th Gen GPUs). A local non-privileged user can write a constant pattern to memory not allocated by the driver. Affected ranges are: Arm Midgard User-space Driver r0p0–r32p0; Bifro...

CVE-2023-32804 Mali GPU Userspace Driver can make an Out-of-Bounds access

Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory...

JVN#46895889: RakRak Document Plus vulnerable to path traversal

RakRak Document Plus provided by Sumitomo Electric Information Systems Co., Ltd. contains a path traversal vulnerability CWE-22. Impact Arbitrary files on the server may be obtained or deleted by a user of the product with specific privileges. Solution Update the Software Update the software to t...

unionteamltd.com.hk Cross Site Scripting vulnerability OBB-3800603

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...