452 matches found
CVE-2024-33979 Cross-site Scripting in Janobe products
Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'q', 'arrival', 'departure' and 'accomodation' parameters in...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
CVE-2024-39250
EfroTech Timetrax v8.3 contains an unauthenticated SQL injection vulnerability located in the q parameter of the search web interface. An unauthenticated attacker can exploit this flaw to execute SQL commands, potentially allowing them to extract or modify sensitive database information . While a...
CVE-2024-39250: Improper Neutralization of Special Elements used in an SQL Command
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
openSUSE: Security Advisory for openssl (SUSE-SU-2023:3397-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for openssl (SUSE-SU-2023:3242-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Plugin Awesome Support SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2024-0594: Improper Neutralization of Special Elements used in an SQL Command
The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to union-based SQL Injection via the 'q' parameter of the wpasgetusers action in all versions up to, and including, 6.1.7 due to insufficient escaping on the user supplied parameter and lack of sufficient...
PT-2024-1822 · Provectus · Kafka-Ui
Name of the Vulnerable Software and Affected Versions: provectus kafka-ui versions 0.4.0 through 0.7.1 Description: The issue is related to incorrect code generation management in the web interface for managing Apache Kafka clusters, kafka-ui. Exploitation of this issue may allow a remote attacke...
CVE-2023-52251
An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages. No fixed release is available; the project has had no commit since 2024-04-08...
CVE-2023-52251: Improper Control of Generation of Code
An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages. No fixed release is available; the project has had no commit since 2024-04-08...
EulerOS Virtualization 2.10.1 : openssl (EulerOS-SA-2023-3507)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the...
EulerOS Virtualization 2.10.0 : shim (EulerOS-SA-2023-3485)
According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions...
EulerOS Virtualization 2.9.1 : openssl (EulerOS-SA-2023-3089)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the...
Low: Red Hat Security Advisory: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Low: Red Hat Security Advisory: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Excessive time spent in DH check / generation with large Q parameter value
...
OpenSSL -- DoS in DH generation
The OpenSSL project reports: Excessive time spent in DH check / generation with large Q parameter value low. Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...
CVE-2023-45202: URL Redirection to Untrusted Site
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...
CVE-2023-45201: URL Redirection to Untrusted Site
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...