8444 matches found
CVE-2024-29387
projeqtor up to 11.2.0 was discovered to contain a remote code execution RCE vulnerability via the component /view/print.php...
PT-2024-22876 · Projeqtor · Projeqtor
Name of the Vulnerable Software and Affected Versions: projeqtor versions up to 11.2.0 Description: The issue is related to a remote code execution RCE vulnerability via the component /view/print.php. This allows for potential exploitation, but specific details about the number of affected device...
Projeqtor SQL注入漏洞
Projeqtor is an open source PHP-based project management software from the Projeqtor community. The software is used to organize various functions required for multiple projects and is suitable for IT projects. An SQL injection vulnerability exists in Projeqtor version 11.2.0 and earlier, which...
CVE-2024-30438
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Print Page block allows Stored XSS.This issue affects Print Page block: from n/a through 1.0.8...
CVE-2024-30438 WordPress Print Page block plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Print Page block allows Stored XSS.This issue affects Print Page block: from n/a through 1.0.8...
CVE-2024-30438 WordPress Print Page block plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Print Page block allows Stored XSS.This issue affects Print Page block: from n/a through 1.0.8...
CVE-2024-30438
CVE-2014-30438 details (from provided sources): An improper neutralization of input during web page generation in the WordPress plugin’s Print Page block allows a Stored XSS. Affected component: the Print Page block in bPlugins. Affected versions: from n/a through 1.0.8. Consequence: Stored Cross...
WordPress Plugin Print Page block 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2024-30438: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Print Page block allows Stored XSS.This issue affects Print Page block: from n/a through 1.0.8...
WordPress Print Page block Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)
Software Print Page block Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30438 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 81c9eb620052 Credits CatFather Required privilege...
SUSE CVE-2024-2824
A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...
DEBIAN-CVE-2024-2824
A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...
PT-2024-22355 · Matthias Wandel +1 · Jhead +1
Name of the Vulnerable Software and Affected Versions: Matthias-Wandel jhead version 3.08 Description: A critical issue affects the PrintFormatNumber function of the file exif.c, leading to a heap-based buffer overflow. The attack may be initiated remotely. Recommendations: For version 3.08,...
USB Print driver Windows Privilege Escalation
The vulnerability of the USB Print driver for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2023-40278
An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp component of OpenClinic GA. By changing the AppointmentUid parameter, an attacker can determine whether a specific appointment exists based on the error...
PT-2024-12881 · Unknown · Openclinic Ga
Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.247.01 Description: An issue has been identified in the printAppointmentPdf.jsp component of OpenClinic GA, which allows an Information Disclosure vulnerability. By changing the AppointmentUid parameter, an attacker ca...
USB Print driver Windows Privilege Escalation
The vulnerability of the USB Print driver for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Automakers Are Sharing Driver Data with Insurers without Consent
Kasmir Hill has the story: Modern cars are internet-enabled, allowing access to services like navigation, roadside assistance and car apps that drivers can connect to their vehicles to locate them or unlock them remotely. In recent years, automakers, including G.M., Honda, Kia and Hyundai, have...
Windows Print Spooler Privilege Escalation
The vulnerability of the Windows Print Spooler in operating systems related to the print queue is associated with synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow attackers to increase their privileges...
Microsoft Windows USB Print Driver Elevation of Privilege Vulnerability
Microsoft Windows USB Print Driver is a USB printer device driver from Microsoft USA. Microsoft Windows USB Print Driver suffers from an elevation of privilege vulnerability that is due to a flaw in the kernel. An attacker could exploit this vulnerability to gain SYSTEM privileges...