PT-2024-29497 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 6.4.2 PrestaShop 1.6 versions prior to 3.18.1 Description: A logical weakness in the "PayPal Official" module for PrestaShop can be exploited by a malicious customer to confirm an order even if the payment is...

PrestaShop 安全漏洞

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Paypal versions prior to 6.4.2 and prior to 3.18.1, which stems from a...

CVE-2024-41551

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/vieworderitems.php?id=...

kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...

CampCodes Supplier Management System 安全漏洞

Campcodes Supplier Management System is a supplier management system from Campcodes, Inc. A security vulnerability exists in CampCodes Supplier Management System version v1.0, which stems from an SQL injection vulnerability via SupplyManagementSystem/admin/vieworderitems.php?id=...

ClassCMS Cross-Site Scripting Vulnerability (CNVD-2024-33676)

ClassCMS is China ClassCMS open source a simple , flexible , secure , easy to expand the content management system . ClassCMS cross-site scripting vulnerability , the vulnerability stems from /admin/?action=home&do=shop:index&keyword=&kind=all file in the order parameter contains cross-site...

CVE-2024-38708

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory &...

CVE-2024-38708

CVE-2024-38708 concerns UkrSolution Barcode Scanner with Inventory & Order Manager (WordPress plugin)

CVE-2024-38708 WordPress Barcode Scanner and Inventory manager plugin <= 1.6.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager allows SQL Injection.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.6.1...

PT-2024-28152 · Unknown · Ukrsolution Barcode Scanner With Inventory & Order Manager

Name of the Vulnerable Software and Affected Versions: UkrSolution Barcode Scanner with Inventory & Order Manager versions 1.6.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows f...

CVE-2024-37522

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dario Curasì CC & BCC for Woocommerce Order Emails allows Stored XSS.This issue affects CC & BCC for Woocommerce Order Emails: from n/a through 1.4.1...

CVE-2024-37522 WordPress CC & BCC for Woocommerce Order Emails plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dario Curasì CC & BCC for Woocommerce Order Emails allows Stored XSS.This issue affects CC & BCC for Woocommerce Order Emails: from n/a through 1.4.1...

CVE-2024-37522

CVE-2024-37522 affects the WordPress plugin CC & BCC for Woocommerce Order Emails. The vulnerability is a Stored Cross-Site Scripting (XSS) issue due to improper handling during web page generation. Affected versions are 1.4.1 and earlier; at the time of the provided data, remediation for this CV...

CVE-2024-37522 WordPress CC & BCC for Woocommerce Order Emails plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dario Curasì CC & BCC for Woocommerce Order Emails allows Stored XSS.This issue affects CC & BCC for Woocommerce Order Emails: from n/a through 1.4.1...

PT-2024-27627 · Woocommerce · Cc & Bcc For Woocommerce Order Emails

Name of the Vulnerable Software and Affected Versions: CC & BCC for Woocommerce Order Emails versions 1.4.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which means...

CVE-2024-6932 ClassCMS cross site scripting

A vulnerability was found in ClassCMS 4.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/?action=home&do=shop:index&keyword=&kind=all. The manipulation of the argument order leads to cross site scripting. The attack can be...

PT-2024-37970 · Classcms · Classcms

Name of the Vulnerable Software and Affected Versions: ClassCMS version 4.5 Description: A vulnerability has been found in an unknown functionality of the file "/admin/?action=home&do=shop:index&keyword=&kind=all". The manipulation of the order argument leads to cross-site scripting. The attack c...

ClassCMS 跨站脚本漏洞

ClassCMS is China ClassCMS open source a simple , flexible , secure , easy to expand the content management system . ClassCMS cross-site scripting vulnerability , the vulnerability stems from /admin/?action=home&do=shop:index&keyword=&kind=all file in the order parameter contains cross-site...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS network devices of the EX4300 series allows a attacker to compromise the integrity of the protected information.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS networking devices of the EX4300 series is related to the absence of blocking mechanisms for outgoing traffic when certain actions are performed in the wrong order. Exploiting this vulnerability can allow a...

PT-2024-29867

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the mailbox: mtk-cmdq component. When mtk-cmdq unbinds, a WARN ON message with condition pm runtime get sync 0 occurs. T...