PT-2022-11628 · Unknown · Phpredisadmin

Name of the Vulnerable Software and Affected Versions: phpRedisAdmin versions up to 1.17.3 phpRedisAdmin versions up to 1.16.1 can be simplified to the above line as 1.17.3 includes all versions up to 1.16.1, so the final output is: phpRedisAdmin versions up to 1.17.3 Description: A vulnerability...

CVE-2020-36619 multimon-ng demod_flex.c add_ch format string

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...

PT-2022-25039 · WordPress · Html5 Video Player

Name of the Vulnerable Software and Affected Versions: Videojs HTML5 Player WordPress plugin versions prior to 1.1.9 Description: The issue concerns a lack of validation and escaping of certain shortcode attributes, which can lead to Stored Cross-Site Scripting attacks. Users with a role as low a...

in add function forgot to add not zero for minimum lp

Lines of code Vulnerability details Impact problems in the calculation of the system Proof of Concept requirebaseTokenAmount 0 && fractionalTokenAmount 0, "Input token amount is zero"; Tools Used manually Recommended Mitigation Steps add checks like basetoken --- The text was updated successfully...

PT-2022-25657 · WordPress · Smsa Shipping For Woocommerce

Name of the Vulnerable Software and Affected Versions: SMSA Shipping for WooCommerce WordPress plugin versions prior to 1.0.5 Description: The issue allows any authenticated users, such as subscribers, to download arbitrary files from the server due to a lack of authorization, proper CSRF checks,...

PT-2022-6389 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.3 and earlier Adobe Bridge versions 13.0.1 and earlier Description: The issue is related to an out-of-bounds write operation in memory. Exploitation of this issue could allow an attacker to execute arbitrary code...

PT-2022-25413 · 10Web · The Photo Gallery

Name of the Vulnerable Software and Affected Versions: The Photo Gallery by 10Web WordPress plugin versions prior to 1.8.3 Description: The issue arises from the plugin's failure to validate and escape certain parameters before outputting them in JS code on another page. This could lead to a Stor...

CVE-2020-36618

CVE-2020-36618 affects Furqan node-whois. Affected is an unknown function in the file index.coffee; the issue enables prototype pollution through manipulation of object prototype attributes. The vulnerability can be exploited remotely, as indicated by the original description, and is considered c...

[SECURITY] Fedora 36 Update: libtasn1-4.19.0-1.fc36

A library that provides Abstract Syntax Notation One ASN.1, as specified by the X.680 ITU-T recommendation parsing and structures management, and Distinguished Encoding Rules DER, as per X.690 encoding and decoding functi ons...

PT-2022-27686 · Unknown · Luckyshot Crmx

Name of the Vulnerable Software and Affected Versions: luckyshot CRMx affected versions not specified Description: A critical issue was found in luckyshot CRMx, affecting the get/save/delete/comment/commentdelete function of the index.php file. This issue leads to SQL injection and can be initiat...

PT-2022-11610 · Unknown · Ctrlo Lenio

Name of the Vulnerable Software and Affected Versions: ctrlo lenio affected versions not specified Description: A vulnerability has been found in ctrlo lenio, classified as problematic, affecting an unknown functionality of the file views/layouts/main.tt of the component Notice Handler. The...

PT-2022-27697 · Unknown · Django-Openipam

Name of the Vulnerable Software and Affected Versions: django-openipam affected versions not specified Description: A problematic vulnerability has been found in django-openipam, affecting an unknown part of the file openipam/report/templates/report/exposed hosts.html. The manipulation of the...

PT-2022-11599 · Owasp · Owasp Nodegoat

Name of the Vulnerable Software and Affected Versions: OWASP NodeGoat affected versions not specified Description: A problematic issue has been found in the Query Parameter Handler component, specifically affecting the file app/routes/research.js. This issue leads to denial of service and can be...

CVE-2022-4592 luckyshot CRMx index.php commentdelete sql injection

A vulnerability was found in luckyshot CRMx and classified as critical. This issue affects the function get/save/delete/comment/commentdelete of the file index.php. The manipulation leads to sql injection. The attack may be initiated remotely. The name of the patch is...

CVE-2020-36617 ewxrjk sftpserver parse.c sftp_parse_path uninitialized pointer

A vulnerability was found in ewxrjk sftpserver. It has been declared as problematic. Affected by this vulnerability is the function sftpparsepath of the file parse.c. The manipulation leads to uninitialized pointer. The real existence of this vulnerability is still doubted at the moment. The name...

PT-2022-11603 · As +1 · As

Name of the Vulnerable Software and Affected Versions: as affected versions not specified Description: A vulnerability was found in the function getFullURL of the file include.cdn.php. The manipulation leads to cross-site scripting. The attack can be initiated remotely. Recommendations: Apply a...

PT-2022-11604 · WordPress · Wp-Ban

Name of the Vulnerable Software and Affected Versions: WP-Ban affected versions not specified Description: A problematic issue has been found in WP-Ban, affecting the toggle checkbox function of the file ban-options.php. The manipulation of the argument $ SERVER"HTTP USER AGENT" leads to cross-si...

PT-2022-27709 · Unknown · Shoplazza Lifestyle

Name of the Vulnerable Software and Affected Versions: Shoplazza LifeStyle version 1.1 Description: A vulnerability has been found in the Announcement Handler component, affecting an unknown functionality of the file /admin/api/theme-edit/. The manipulation of the Text and Mobile Text arguments...

PT-2022-27648 · Unknown · Starter-Public-Edition-4

Name of the Vulnerable Software and Affected Versions: starter-public-edition-4 versions up to 4.6.10 Description: A vulnerability was found in the software, classified as problematic. It affects an unknown function and leads to cross site scripting. The manipulation can be launched remotely...

PT-2022-27679 · Unknown · Mschaef Toto

Name of the Vulnerable Software and Affected Versions: mschaef toto versions up to 1.4.20 Description: A vulnerability was found in the Email Parameter Handler component, which can be exploited to lead to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.4.21 is...