5253 matches found
CVE-2020-23563
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x0000000000002cba...
CVE-2020-23561
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x0000000000005722...
CVE-2022-32318
Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via the component /ffos/classes/Master.php?f=savecategory...
CVE-2022-32318
Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via the component /ffos/classes/Master.php?f=savecategory...
CVE-2022-33644
Xbox Live Save Service Elevation of Privilege Vulnerability...
CVE-2022-33644
Xbox Live Save Service Elevation of Privilege Vulnerability...
CVE-2022-33644
Xbox Live Save Service Elevation of Privilege Vulnerability...
CVE-2022-33644 Xbox Live Save Service Elevation of Privilege Vulnerability
...
CVE-2022-33644
CVE-2022-33644 affects Xbox Live Save Service and is an Elevation of Privilege on Windows/Xbox components. Connected data confirms the vulnerability type (privilege escalation) and relates it to Windows/Xbox Live Save Service. Public exploits exist for this CVE, and remediation is provided by Mic...
CVE-2022-33644 Xbox Live Save Service Elevation of Privilege Vulnerability
...
Xbox Live Save Service Elevation of Privilege Vulnerability
...
PT-2022-3793 · Microsoft · Xbox Live Save Service +1
Name of the Vulnerable Software and Affected Versions: Xbox Live Save Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Xbox Live Save Service, which can be exploited to bypass system security restrictions and elevate privileges...
CVE-2022-33644: Undefined Security Weakness
Xbox Live Save Service Elevation of Privilege Vulnerability...
PT-2022-6290 · WordPress · Wicked Folders
Name of the Vulnerable Software and Affected Versions: Wicked Folders plugin for WordPress versions up to, and including, 2.18.16 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ajax save state function. This allows unauthenticat...
CVE-2022-29096
Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in saveGroupConfigurations page. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser ...
CVE-2022-30118
Title for CVE: XSS in /dashboard/system/express/entities/forms/savecontrol/GUID: old browsers only.Description: When using Internet Explorer with the XSS protection disabled, editing a form control in an express entities form for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 can...
CVE-2022-31294
An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...
CVE-2022-31914
Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS via zms/admin/publichtml/saveanimal?anid=24...
