70 matches found
CVE-2025-30608 WordPress SQL Backup plugin <= 3.5.2 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Anthony WordPress SQL Backup wordpress-sql-backup allows Stored XSS.This issue affects WordPress SQL Backup: from n/a through = 3.5.2...
CVE-2025-26852
DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection...
CVE-2025-24444
Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2025-10865 · Adobe · Substance3D - Sampler
Name of the Vulnerable Software and Affected Versions: Substance3D - Sampler versions 4.5.2 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction,...
PT-2024-27669 · Unknown · Com.Grice.Call
Name of the Vulnerable Software and Affected Versions: com.grice.call application version 4.5.2 Description: The issue allows any installed application, even those without permissions, to place phone calls without user interaction by sending a crafted intent via the...
WordPress Advanced Cron Manager – debug & control plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by emad Patchstack Alliance in WordPress Plugin Advanced Cron Manager – debug & control versions = 2.5.2...
CVE-2021-21575
Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability...
CVE-2023-47815
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Venutius BP Profile Shortcodes Extra plugin = 2.5.2 versions...
WordPress Plugin Better Search 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
PT-2023-3767 · Siemens · Simatic Wincc
Name of the Vulnerable Software and Affected Versions: SIMATIC WinCC versions prior to V7.5.2.13 Description: The issue is related to improper permission assignment for a critical resource in the SCADA system. This could allow an authenticated local attacker to inject arbitrary code and escalate...
Siemens SCALANCE 加密问题漏洞
Siemens SCALANCE is a series of Ethernet switches from Siemens, Germany. It connects to Industrial Control System ICS devices, including Programmable Logic Controllers PLCs and Human Machine Interface HMI systems. A vulnerability exists in Siemens SCALANCE due to an encryption issue, which arises...
PYSEC-2023-2
Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2...
WordPress plugin Database Backup 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. cross-site request forgery vulnerability exists in versions of WordPress Database Backup plugin prior to 2.5....
PYSEC-2021-829
TensorFlow is an open source platform for machine learning. In affected versions the implementation of SplitV can trigger a segfault is an attacker supplies negative arguments. This occurs whenever sizesplits contains more than one value and at least one value is negative. The fix will be include...
SUSE-SU-2020:1220-1 Security update for ghostscript
This update for ghostscript to version 9.52 fixes the following issues: - CVE-2020-12268: Fixed a heap-based buffer overflow in jbig2imagecompose bsc1170603...
PT-2020-4301 · Teclib +1 · Glpi +1
Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.2 Description: The issue is related to a SQL Injection in the API's search function, allowing an attacker to break SQL syntax and utilize a UNION SELECT query to reflect sensitive information, such as the current...
Rukovoditel Code Issue Vulnerability
Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management , customer relationship management and other functions . A security vulnerability exists in Rukovoditel version 2.5.2. An attacker can change the content-type...
Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB4538158)
Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB4538158 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...
Description of the Security and Quality Rollup for .NET Framework 4.5.2 for Windows Server 2012 (KB 4459944)
Description of the Security and Quality Rollup for .NET Framework 4.5.2 for Windows Server 2012 KB 4459944 Applies to: Microsoft .NET Framework 4.5.2 Notice This update is included in the Preview of Quality Rollup that's dated November 27, 2018. This update was previously released as part of the...