Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...

CVE-2023-30871 WordPress Stock Exporter for WooCommerce Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...

CVE-2023-30871

CVE-2023-30871 affects the WordPress plugin Stock Exporter for WooCommerce by PT Woo Plugins (by Webdados). On versions = 1.2.0. If upgrading immediately is not possible, apply vendor-supplied mitigations/patches where available and ensure input/output handling adheres to secure coding practices....

PT-2023-18066 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a possible code execution due to type confusion, which could lead to remote code execution without requiring additional execution...

PT-2023-5629 · Jpeg · Jpeg

Name of the Vulnerable Software and Affected Versions: jpeg affected versions not specified Description: The issue is related to a missing bounds check in the jpeg component, which could lead to local information disclosure with System execution privileges needed. User interaction is not needed f...

PT-2023-6403 · Procps Ng +11 · Procps-Ng +11

Name of the Vulnerable Software and Affected Versions: procps-ng versions affected versions not specified Description: The issue is related to a buffer overflow in the procps-ng utility, specifically in the "ps" utility, which allows a user to write almost unlimited amounts of unfiltered data int...

Moxa PT-7528 and PT-7828 Series Weak Password Requirements (CVE-2020-6995)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access. This plugin only works with Tenable.ot. Please visit...

Moxa PT-7528 and PT-7828 Series Buffer Overflow (CVE-2020-6989)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to cause a denial-of-service condition or execute arbitrary code. This plugin only works with Tenable.ot. Please visit...

Moxa PT-7528 and PT-7828 Series Information Exposure (CVE-2020-6993)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

Moxa PT-7528 and PT-7828 Series Use of Hard-Coded Cryptographic Key (CVE-2020-6983)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered. This plugin only works with Tenable.ot. Please visit...

Moxa PT-7728 Series Switch Improper Authorization (CVE-2016-4514)

Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Moxa PT-7528 and PT-7828 Series Weak Cryptographic Algorithm (CVE-2020-6987)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed. This plugin only works with Tenable.ot. Please visit...

Moxa PT-7528 and PT-7828 Series Use of Hard-Coded Credentials (CVE-2020-6985)

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

PT-2023-25698 · Sourcecodester · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue affects the HTTP POST Request Handler component, specifically the file /classes/Master.php?f=save inquiry. The manipulation of the id argument leads to...

PT-2023-3864 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows Authentication component of the Windows operating system. It can be exploited by a remote attacker to launch a...

PT-2023-3826 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel, which is associated with insufficient access control. This vulnerability can be exploited to...

PT-2023-3853 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Install Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows operating system installer, which can be exploited to elevate privileges. This allows an attacker t...

informatica24.pt Cross Site Scripting vulnerability OBB-3440841

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-3401 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the OLE DB driver for SQL Server on Windows operating systems. This can be exploited by a remote attacker to execute...

PT-2023-3180 · Microsoft · Windows Bus Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bus Filter Driver affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Bus Filter driver of Windows operating systems. This can allow an attacker to...