4570 matches found
PT-2023-24962 · Unknown · Simplephpscripts Classified Ads Script
Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Classified Ads Script version 1.8 Description: A vulnerability was found in the component URL Parameter Handler of the file /preview.php. The manipulation of the argument p leads to cross site scripting. It is possible to...
PT-2023-25020 · Mcl-Net · Mcl-Net
Name of the Vulnerable Software and Affected Versions: MCL-Net version 4.3.5.8788 Description: A Directory Browsing issue allows attackers to gain sensitive information about the configured databases via the "/file" endpoint. This endpoint is accessible on the default port 5080. Recommendations:...
PT-2023-24974 · Xiamen Si Xin Communication Technology · Video Management System
Name of the Vulnerable Software and Affected Versions: Xiamen Si Xin Communication Technology Video management system versions 3.1 through 4.1 Description: An issue was discovered with the JSESSION IDs in the system, allowing attackers to gain escalated privileges. Recommendations: For versions 3...
PT-2023-17995 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the initiateVenueUrlAnqpQueryInternal function of sta iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with System...
PT-2023-18002 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read due to a missing bounds check in multiple files. This could lead to local information disclosure in the wifi server, with System execution privileg...
PT-2023-18004 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read due to unsafe deserialization in the addGroupWithConfigInternal function of p2p iface.cpp. This could lead to local information disclosure, requiri...
PT-2023-25408 · Unknown · Insider Threat Management Server
Name of the Vulnerable Software and Affected Versions: Insider Threat Management Server versions prior to 7.14.3 Description: A missing authorization check in multiple SOAP endpoints enables an attacker on an adjacent network to read and write unauthorized objects. To exploit this, an attacker mu...
PT-2023-11500 · Unknown · Chaoji Cms
Name of the Vulnerable Software and Affected Versions: Chaoji CMS version 2.18 Description: A stored cross site scripting XSS issue allows attackers to execute arbitrary code via the "/index.php?admin-master-webset" API endpoint. This enables attackers to inject malicious scripts into the...
PT-2023-24656 · M Files · M-Files Server
Name of the Vulnerable Software and Affected Versions: M-Files Server versions prior to 23.6.12695.3 Description: The issue is related to an unchecked parameter value in M-Files Server, which allows an anonymous user to cause a denial of service. Recommendations: For versions prior to 23.6.12695....
PT-2023-25175 · Dataease · Dataease
Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 1.18.8 Description: The issue is related to a missing authorization check, allowing unauthorized users to manipulate a dashboard created by the administrator in an open source data visualization analysis tool...
WordPress Restrict Content Plugin < 3.2.3 is vulnerable to Cross Site Scripting (XSS)
Software Restrict Content Type Plugin Vulnerable versions 3.2.3 Fixed in 3.2.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 140b3a291ad3 Credits Unknown Required privilege...
PT-2023-22482 · Fpc +1 · Fpc +1
Name of the Vulnerable Software and Affected Versions: SMM versions 1 and 2 FPC affected versions not specified Description: A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited number of commands that the...
WordPress Restrict Content Plugin < 3.2.3 is vulnerable to Broken Access Control
Software Restrict Content Type Plugin Vulnerable versions 3.2.3 Fixed in 3.2.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 64157ce6271e Credits Unknown Required privilege Subscrib...
PT-2023-3445 · Google +3 · Google Chrome +3
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.198 Description: The issue is related to a use after free vulnerability in the Guest View component of Google Chrome, which can lead to heap corruption. An attacker who convinces a user to install a...
Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC Make a logged-in admin open a page containing the HTML code below...
PT-2023-9687 · Node.Js · Node.Js
Name of the Vulnerable Software and Affected Versions: Node.js version 20 Description: A flaw in the experimental permission model of Node.js version 20 allows malicious actors to retrieve stats from files they do not have explicit read access to when the --allow-fs-read flag is used with a non-...
PT-2023-25295 · Ipswitch · Whatsup Gold
Name of the Vulnerable Software and Affected Versions: In Progress WhatsUp Gold versions prior to 23.0.0 Description: The issue is related to an SNMP-related application endpoint that failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary...
PT-2023-3612 · Advantech · Advantech R-Seenet
Name of the Vulnerable Software and Affected Versions: Advantech R-SeeNet version 2.4.22 Description: The issue is related to incorrect external control of a file name or path, allowing a remote attacker to gain unauthorized access to local files by sending specially crafted HTTP requests. This c...
PT-2023-3543 · 1Panel · 1Panel
Name of the Vulnerable Software and Affected Versions: 1Panel versions prior to 1.3.6 Description: The issue is related to command injection when adding container repositories. An authenticated attacker can craft a malicious payload to achieve this. The vulnerability is due to the lack of proper...
