CVE-2023-30058

novel-plus 3.6.2 is vulnerable to SQL Injection...

Sql injection

novel-plus 3.6.2 is vulnerable to SQL Injection...

CVE-2023-30058

novel-plus 3.6.2 is vulnerable to SQL Injection...

Vulnerabilities fixed in Notepad++

Vulnerabilities have been fixed in Notepad++. A malicious person could exploit the vulnerabilities to gain access to memory locations to which the malicious party is not authorized, or potentially execute arbitrary code with privileges of the victim. Successful exploitation requires the malicious...

CVE-2023-30058

novel-plus 3.6.2 is vulnerable to SQL Injection...

CVE-2023-38743

Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine...

PT-2023-22522 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: The issue is related to SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was...

CVE-2023-38743

Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine...

CVE-2023-38743: Undefined Security Weakness

Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine...

CVE-2023-30058: Improper Neutralization of Special Elements used in an SQL Command

novel-plus 3.6.2 is vulnerable to SQL Injection...

CVE-2023-38743

The Zoho ManageEngine ADManager Plus software for managing Active Directory services is vulnerable to command injection due to deficiencies in access control. This flaw allows an authenticated user with administrator privileges to execute arbitrary commands on the host machine, potentially with s...

CVE-2023-30058

novel-plus 3.6.2 is vulnerable to SQL Injection...

CVE-2023-30058

CVE-2023-30058 affects novel-plus 3.6.2, with a confirmed SQL Injection vulnerability. The initial data lists a high-severity impact (CVSS v3.1: 9.8, network attack, no user interaction) and references confirm the issue across multiple feeds, but none provide a concrete remediation or fix version...

novel-plus SQL Injection Vulnerability

novel-plus novel-plus is a multi-end PC, WAP reading, full-featured original literature CMS system. A security vulnerability exists in novel-plus version 3.6.2, which is prone to SQL injection attacks...

PT-2023-32827 · WordPress · User Shortcodes Plus

Name of the Vulnerable Software and Affected Versions: User Shortcodes Plus plugin for WordPress versions up to, and including, 2.0.2 Description: The issue is related to Insecure Direct Object Reference, which affects the user meta shortcode due to missing validation on a user-controlled key. Th...

USN-6342-2 linux-azure, linux-azure-4.15 vulnerabilities

Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information. CVE-2023-20593 Zheng Zhang discovered that the device-mapper implementation in the Linux kernel...

Important: clamav

Issue Overview: A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a...

Notepad++ File Manager XSS

The vulnerability of the FileManager::detectLanguageFromTextBegining function in the Notepad++ text editor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ManageEngine ADManager Plus < Build 7203 File Disclosure

Zoho ManageEngine ADManager Plus before version 7.2 Build 7203 is affected by a file disclosure vulnerability that allows admin users to download any file from the server machine via directory traversal. Note that Nessus has not tested for this issue but has instead relied only on the application...

CVE-2023-35719

ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...