The vulnerability of the IPC CanvasTranslator component in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the IPC CanvasTranslator component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the glGetProgramiv function in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the glGetProgramv function in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

CVE-2023-39919

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin = 2.0 versions...

CVE-2023-39919

CVE-2023-39919 affects the WordPress plugin wpShopGermany – Protected Shops (versions <= 2.0). The vulnerability is an Authenticated Stored Cross-Site Scripting (XSS) that can be exploited by users with admin+ privileges to inject and execute script content. The issue stems from inadequate val...

CVE-2023-39919 WordPress wpShopGermany – Protected Shops Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin = 2.0 versions...

CVE-2023-39919 WordPress wpShopGermany – Protected Shops Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin = 2.0 versions...

The vulnerability of the Mac OS operating system, related to reading beyond the buffer in memory, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Mac OS is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the MXSecurity software platform for managing security in industrial networks stems from deficiencies in authentication procedures, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the MXSecurity software platform for managing security in industrial networks is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services stems from deficiencies in access control. This allows unauthorized users to gain unauthorized access to protected information.

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent software for data protection, Acronis Cyber Protect 15, arises from insufficient protection of operational data. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent software for data protection, Acronis Cyber Protect 15, is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to...

The vulnerability of the Zoom video conferencing service, which stems from insufficient validation of input data, allows attackers to access protected information.

The vulnerability of the Zoom video conferencing service exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

WordPress plugin wpShopGermany - Protected Shops Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

PT-2023-27154 · WordPress · Wpshopgermany – Protected Shops

Name of the Vulnerable Software and Affected Versions: wpShopGermany – Protected Shops plugin versions = 2.0 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts into th...

The vulnerability of the Apache NiFi data processing platform, related to insufficient comparison, allows a attacker to gain unauthorized access to protected information.

The vulnerability of the Apache NiFi data processing platform is related to insufficient comparison. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the LoadLibrary function in the cross-platform framework for developing Qt software allows a perpetrator to gain access to protected information.

The vulnerability of the LoadLibrary function in the cross-platform framework for developing Qt software relates to the possibility of bypassing the directory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerability of the Zoom video conferencing service, related to insecure management of privileges, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Zoom video conferencing service is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PTC Kepware KepServerEX (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : PTC Equipment : Kepware KepServerEX Vulnerabilities : Uncontrolled Search Path Element, Improper Input Validation, Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of...

The vulnerability of the NPort IAW5000A-I/O Series web server software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the NPort IAW5000A-I/O Series web server software is related to the presence of a hard-coded key, which could potentially facilitate manipulation of the firmware. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

Synology Router Manager 路径遍历漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from Synology, China. A path traversal vulnerability exists in Synology Router Manager versions prior to 1.3 1.3.1-9346-6, which stems from an incorrect restriction on restricted directory pathnames in the cgi...

The vulnerability of Zoom’s video conferencing software, related to the implementation of security features at the client side, allows attackers to gain unauthorized access to protected information.

The vulnerability of Zoom, a video conferencing software, is related to the implementation of security features at the client side. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...