CVE-2024-31992 Mealie contains a DoS vulnerability in recipe importer

Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the safescrapehtml function utilizes a user-controlled URL to issue a request to a remote server, however these requests are not rate-limited. While there are efforts to prevent DDoS by implementing a timeout on requests, it...

financialplannerworld.com Cross Site Scripting vulnerability OBB-3834651

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

VulnCheck KEV: CVE-2021-21978

VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could uploa...

CVE-2023-45881

GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resourcesaddQuickajaxProcess.php file upload with resultant XSS. The imageAsLinks parameter must be set to Y to return HTML code. The filename attribute of the bodyfile1 parameter is reflected in the response...

Engelsystem Code Issue Vulnerability

Engelsystem is an open source shift planning system from Engelsystem. Engelsystem has a code issue vulnerability that stems from the current session not expiring after a password reset...

org.drools.planner:drools-planner-core (5.4.0.beta2), org.drools.planner:drools-planner-distribution (5.4.0.beta2) +23 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.4.0.beta2)

org.drools:drools-core MAVEN version 5.4.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.4.0.beta2 - org.drools.planner:drools-planner-distribution 5.4.0.bet...

org.drools.planner:drools-planner-core (5.3.0.cr1), org.drools.planner:drools-planner-distribution (5.3.0.cr1) +22 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.3.0.cr1)

org.drools:drools-core MAVEN version 5.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.3.0.cr1 - org.drools.planner:drools-planner-distribution 5.3.0.cr1 -...

org.drools.planner:drools-planner-core (5.1.0), org.drools.planner:drools-planner-examples (5.1.0) +17 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.1.0)

org.drools:drools-core MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.1.0 - org.drools.planner:drools-planner-examples 5.1.0 -...

org.drools.planner:drools-planner-core (5.4.0.cr1), org.drools.planner:drools-planner-distribution (5.4.0.cr1) +35 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.4.0.cr1)

org.drools:drools-core MAVEN version 5.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.4.0.cr1 - org.drools.planner:drools-planner-distribution 5.4.0.cr1 -...

org.drools.planner:drools-planner-benchmark (5.5.0.beta1), org.drools.planner:drools-planner-core (5.5.0.beta1) +39 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.5.0.beta1)

org.drools:drools-core MAVEN version 5.5.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-benchmark 5.5.0.beta1 - org.drools.planner:drools-planner-core 5.5.0.beta1 ...

org.drools.planner:drools-planner-core (5.2.1.final), org.drools.planner:drools-planner-examples (5.2.1.final) +25 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.2.1.final)

org.drools:drools-core MAVEN version 5.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.2.1.final - org.drools.planner:drools-planner-examples 5.2.1.final -...

org.drools.planner:drools-planner-benchmark (6.0.0.alpha9), org.drools.planner:drools-planner-core (6.0.0.alpha9) +112 more potentially affected by CVE-2022-1415 via org.drools:drools-core (6.0.0.alpha9)

org.drools:drools-core MAVEN version 6.0.0.alpha9 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-benchmark 6.0.0.alpha9 - org.drools.planner:drools-planner-core 6.0.0.alph...

org.drools.planner:drools-planner-core (5.3.0.beta1), org.drools.planner:drools-planner-distribution (5.3.0.beta1) +20 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.3.0.beta1)

org.drools:drools-core MAVEN version 5.3.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.3.0.beta1 - org.drools.planner:drools-planner-distribution 5.3.0.bet...

org.drools.planner:drools-planner-core (5.2.0.cr1), org.drools.planner:drools-planner-distribution (5.2.0.cr1) +25 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.2.0.cr1)

org.drools:drools-core MAVEN version 5.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.2.0.cr1 - org.drools.planner:drools-planner-distribution 5.2.0.cr1 -...

org.drools.planner:drools-planner-core (5.4.0.beta1), org.drools.planner:drools-planner-distribution (5.4.0.beta1) +23 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.4.0.beta1)

org.drools:drools-core MAVEN version 5.4.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.4.0.beta1 - org.drools.planner:drools-planner-distribution 5.4.0.bet...

org.drools.planner:drools-planner-benchmark (5.6.0.cr1), org.drools.planner:drools-planner-core (5.6.0.cr1) +40 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.6.0.cr1)

org.drools:drools-core MAVEN version 5.6.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-benchmark 5.6.0.cr1 - org.drools.planner:drools-planner-core 5.6.0.cr1 -...

WordPress PublishPress Planner: Organize and Schedule Your WordPress Content Plugin <= 1.9.4 is vulnerable to Cross Site Scripting (XSS)

Software PublishPress Planner: Organize and Schedule Your WordPress Content Type Plugin Vulnerable versions = 1.9.4 Fixed in 1.9.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID...

WordPress Script Planner Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Script Planner Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b3b13fcbcc38 Credits Rafie Muhammad Patchstack Required...

SUSE CVE-2007-0556

The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service server crash and possibly access database content via an "ALTE...

SUSE CVE-2018-20802

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3...