CVE-2019-3415

ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files...

Evisions MAPS 跨站脚本漏洞

Evisions MAPS is a web-based application server from Evisions, Inc. A cross-site scripting vulnerability exists in Evisions MAPS version v6.10.2.267, which stems from the presence of reflective cross-site scripting in the /mw/ endpoint, which could lead to an attacker executing arbitrary code in ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fixed a possible null pointer dereferencing issue. In malidpmwconnectorreset, new memory is allocated using kzalloc, but no checks are performed. To prevent null pointer dereferencings, ensure that mwstate is...

CVE-2023-46206

Missing Authorization vulnerability in Webの相談所 MW WP Form mw-wp-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MW WP Form: from n/a through = 4.4.5...

CVE-2023-46206 WordPress MW WP Form plugin <= 4.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webの相談所 MW WP Form mw-wp-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MW WP Form: from n/a through = 4.4.5...

CVE-2023-46206 WordPress MW WP Form plugin <= 4.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webの相談所 MW WP Form mw-wp-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MW WP Form: from n/a through = 4.4.5...

PT-2025-1509 · WordPress · Mw Wp Form

Name of the Vulnerable Software and Affected Versions: MW WP Form versions n/a through 4.4.5 Description: The issue is related to a Missing Authorization vulnerability in MW WP Form, which allows exploiting incorrectly configured access control security levels. Recommendations: For MW WP Form...

WordPress plugin MW WP Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Malicious code in shmam-mw-test-3-test-package-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b51f76988cbf6f57115b148f6bc499d56997dcb2eef0257e563fffbef11fd982 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of kzalloc to allocate new memory without performing any checks in malidpmwconnectorreset, resulting...

CVE-2024-34701 CreateWiki vulnerable to impersonation of wiki requester

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. It is possible for users to be considered as the requester of a specific wiki request if their local user ID on any wiki in a wiki farm matches the local ID of the requester at the wiki where the wiki request was made...

mw-v.nl Improper Access Control vulnerability OBB-3923175

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress MW WP Form Plugin <= 5.0.6 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:web-soudan:mwwpform"; if description...

PT-2024-20620 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue arises in the malidp mw connector reset function where new memory is allocated using kzalloc, but no check is performed to prevent null pointer dereferencing. To prevent this...

CVE-2024-24804

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in websoudan MW WP Form allows Stored XSS.This issue affects MW WP Form: from n/a through 5.0.6...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in websoudan MW WP Form allows Stored XSS.This issue affects MW WP Form: from n/a through 5.0.6...

CVE-2024-24804 WordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in websoudan MW WP Form allows Stored XSS.This issue affects MW WP Form: from n/a through 5.0.6...

CVE-2024-24804 WordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in websoudan MW WP Form allows Stored XSS.This issue affects MW WP Form: from n/a through 5.0.6...

CVE-2024-24804

CVE-2024-24804 affects MW WP Form (WordPress). The vulnerability is a Stored XSS due to improper input neutralization during web page generation, impacting MW WP Form versions up to 5.0.6. Remediation: upgrade to MW WP Form 5.1.0 (per Patchstack) to address the issue. Exploitation status is not p...

WordPress Plugin MW WP Form Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...