Lucene search
+L

3716 matches found

Cvelist
Cvelist
•added 2023/12/28 12:00 a.m.•40 views

CVE-2023-46989

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts function in the productlist.php file...

8.3AI score0.00235EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/12/28 12:00 a.m.•15 views

CVE-2023-46989

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts function in the productlist.php file...

8.5AI score0.00235EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/28 12:00 a.m.•97 views

CVE-2023-46989

CVE-2023-46989 : A SQL Injection vulnerability exists in the Innovadeluxe Quick Order module for PrestaShop, affected in versions before 1.4.0. The issue is triggered via the getProducts() function in productlist.php, allowing a local attacker to execute arbitrary code. According to the connected...

7.8CVSS8AI score0.00235EPSS
SaveExploits0References1Affected Software1
Citrix
Citrix
•added 2023/12/28 12:00 a.m.•18 views

The new feature "Use existing identity pools to create identities for MCS-provisioned machines"

For quick deploy, it should be 1 to 1 mapping for identity pool to MCS catalog...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•5 views

CVE-2023-46989: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts function in the productlist.php file...

7.8CVSS7.8AI score0.00235EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/12/28 12:00 a.m.•21 views

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A SQL injection vulnerability exists in PrestaShop idxquickorder versions prior to 1.4.0, which originates...

7.8CVSS8.7AI score0.00235EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/27 12:00 a.m.•3 views

PT-2023-30284

Name of the Vulnerable Software and Affected Versions Innovadeluxe Quick Order module for PrestaShop versions prior to 1.4.0 Description The issue allows local attackers to execute arbitrary code via the getProducts function in the productlist.php file. This is a SQL Injection vulnerability, whic...

7.8CVSS6.4AI score0.00235EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2023/12/19 3:15 p.m.•17 views

CVE-2023-6913

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView withou...

8.1CVSS5.8AI score0.00729EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/14 9:15 a.m.•34 views

CVE-2023-40659

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

6.1CVSS0.00405EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/12/14 9:15 a.m.•17 views

CVE-2023-40659

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

6.1CVSS5.8AI score0.00405EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/14 9:15 a.m.•26 views

Cross site scripting

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

5.8CVSS6.3AI score0.00405EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/14 8:52 a.m.•56 views

CVE-2023-40659

Affected product: Easy Quick Contact module for Joomla. Vulnerability: reflected XSS in the Easy Quick Contact module. Root cause: not explicitly detailed beyond a reflected XSS flaw. Impact (per sources): enables cross-site scripting in victims’ browsers; CVSS v3.1 base score 6.1 (MEDIUM) with N...

6.1CVSS6AI score0.00405EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/14 12:00 a.m.•19 views

PT-2023-27581 · Joomla · Easy Quick Contact

Name of the Vulnerable Software and Affected Versions: Easy Quick Contact module for Joomla affected versions not specified Description: A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla. Recommendations: At the moment, there is no information about a newer...

6.1CVSS6AI score0.00405EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/12/14 12:00 a.m.•17 views

Joomla Security Breach

Joomla is an open source, cross-platform content management system CMS developed by the Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla that originates from a reflected cross-site scripting vulnerability in the Easy Quick Contact module...

6.1CVSS6.2AI score0.00405EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/14 12:00 a.m.•7 views

CVE-2023-40659: Improper Neutralization of Input During Web Page Generation

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

6.1CVSS6.3AI score0.00405EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2023/12/12 5:29 p.m.•22 views

golang: crypto/tls: panic when processing post-handshake message on QUIC connections

A flaw was found in Golang. Processing an incomplete post-handshake message for a QUIC connection caused a panic...

7.5CVSS6.7AI score0.01345EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2023/12/12 5:24 p.m.•16 views

golang: crypto/tls: panic when processing post-handshake message on QUIC connections

A flaw was found in Golang. Processing an incomplete post-handshake message for a QUIC connection caused a panic...

7.5CVSS6.7AI score0.01345EPSS
SaveExploits0References8
Citrix
Citrix
•added 2023/12/05 12:00 a.m.•16 views

How to delete catalogs created in the "Quick Deploy" interface

This article describes how to delete catalogs created in the "Quick Deploy" interface...

7AI score
SaveExploits0
osv_cve
osv_cve
•added 2023/11/22 11:15 p.m.•16 views

CVE-2023-47829

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codez Quick Call Button plugin = 1.2.9 versions...

4.8CVSS7.3AI score0.00386EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/22 11:09 p.m.•91 views

CVE-2023-47829

CVE-2023-47829 affects Codez Quick Call Button plugin for WordPress, with the vulnerability described as Cross-site Scripting due to improper input neutralization in web page generation. Affected versions are

5.9CVSS5.6AI score0.00386EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder