2568 matches found
CVE-2023-29425
Cross-Site Request Forgery CSRF vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin = 4.9.23 versions...
CVE-2023-29425
Cross-Site Request Forgery CSRF vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin = 4.9.23 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin = 4.9.23 versions...
CVE-2023-29425
CVE-2023-29425 is a CSRF vulnerability in the plainware.Com ShiftController Employee Shift Scheduling WordPress plugin, affecting versions
WordPress Plugin ShiftController Employee Shift Scheduling Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
CVE-2023-29425: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin = 4.9.23 versions...
kernel: Linux kernel: Denial of Service and information disclosure via undefined bit shift in drm/ttm
A flaw was found in the Linux kernel's drm/ttm component. A local user could exploit an undefined behavior in bit shifting, specifically when a signed 32-bit value is shifted by 31 bits, which cannot be represented in an 'int' type. This vulnerability could lead to local information disclosure,...
kernel: perf/x86/amd: fix potential integer overflow on shift of a int
A flaw was found in the support for AMD processors in the Linux kernel. An improper left shift of a 32-bit integer can cause an integer overflow, possibly impacting system stability and resulting in a denial of service...
Hitachi Energy Electronic Shift Operations Management System Security Vulnerability
Hitachi Energy Electronic Shift Operations Management System is Hitachi's management platform for ensuring the safe, efficient and reliable operation and maintenance of mission-critical plant facilities and assets. A security vulnerability exists in Hitachi Energy Electronic Shift Operations...
PT-2023-9768
Name of the Vulnerable Software and Affected Versions Linux kernel version 6.2.0-34-generic 3422.04.1-Ubuntu Description The vulnerability is related to a shift out-of-bounds issue in the drm/amdkfd component of the Linux kernel. This issue can cause a denial of service. The vulnerability is caus...
CVE-2023-45659
Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained access to a users' account, i.e., logged in and obtained a session, an attackers' session is not terminated if the users' account password is reset. This vulnerability has been fixe...
CVE-2023-45152
Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it possible to perform a port scan against the local environment. This vulnerability has been fixed in commit ee7d30b33. If a patch cannot be deployed, operators should ensure that n...
Design/Logic Flaw
Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained access to a users' account, i.e., logged in and obtained a session, an attackers' session is not terminated if the users' account password is reset. This vulnerability has been fixe...
CVE-2023-45659
Engelsystem is affected by CVE-2023-45659, where if a user’s password is compromised and an attacker gains access to that user’s session, the attacker’s session is not terminated after the user’s password is reset. The issue has a fix committed in dbb089315ff3d, and users are advised to update th...
Nextcloud: Self XSS when pasting HTML into Text app with Ctrl+Shift+V
A vulnerability was found where pasting HTML into the Text app using Ctrl+Shift+V would insert the HTML into the page, allowing for a potential XSS attack...
Engelsystem Code Issue Vulnerability
Engelsystem is an open source shift scheduling system from Engelsystem. Engelsystem has a code issue vulnerability that stems from a Server Request Forgery SSRF vulnerability in the Import schedule feature...
PT-2023-29633 · Unknown · Engelsystem
Name of the Vulnerable Software and Affected Versions: Engelsystem affected versions not specified Description: Engelsystem is a shift planning system for chaos events. If a user's password is compromised and an attacker gains access to the user's account, the attacker's session is not terminated...
Engelsystem Code Issue Vulnerability
Engelsystem is an open source shift planning system from Engelsystem. Engelsystem has a code issue vulnerability that stems from the current session not expiring after a password reset...
The vulnerability of embedded Qualcomm microprogramming software, related to the pointer shifting beyond the allocated memory space, allows a hacker to execute arbitrary code.
The vulnerability of microprogramming software in embedded Qualcomm chips is related to the pointer shifting beyond the allocated memory space. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
kernel: fbcon: shift-out-of-bounds in fbcon_set_font()
A flaw was found in the Framebuffer Console fbcon in the Linux Kernel. When providing a font-width and font-height greater than 32 to the fbconsetfont, since there are no checks in place, a shift-out-of-bounds occurs, leading to undefined behavior and possible denial of service...