2869 matches found
CVE-2023-23366
A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: Music Stati...
CVE-2023-4997
Improper authorisation of regular users in ProIntegra Uptime DC software versions below 2.0.0.33940 allows them to change passwords of all other users including administrators leading to a privilege escalation...
PT-2023-36052 · Git +1 · Apache Poi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving the java.base/java.util.Arrays.copyOf, java.base/java.lang.AbstractStringBuilder.ensureCapacityInterna...
CVE-2022-35908
Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...
Security update for python-CairoSVG (moderate)
openSUSE Security Update: Security update for python-CairoSVG Announcement ID: openSUSE-SU-2023:0260-1 Rating: moderate References: 1180648 1209538 Cross-References: CVE-2021-21236 CVE-2023-27586 CVSS scores: CVE-2021-21236 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-27586 NVD...
CVE-2023-5104 Improper Input Validation in nocodb/nocodb
Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0...
WordPress WP Smart Import Plugin < 1.0.3 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xylusthemes:wpsmartimport"; ifdescription...
CVE-2023-43373
Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the nutenteagg parameter at /hoteldruid/interconnessioni.php...
CVE-2023-41374
Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier because the issue exists in parsing of...
PT-2023-27989 · Unknown · Dairy Farm Shop Management System Using Php/Mysql
Name of the Vulnerable Software and Affected Versions: Dairy Farm Shop Management System Using PHP and MySQL version 1.1 Description: The Dairy Farm Shop Management System Using PHP and MySQL contains multiple SQL injection vulnerabilities in the Login function. These vulnerabilities are exploite...
CVE-2023-4750 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.1857...
PT-2023-30297 · Infosoftbd · Clcknshop
Name of the Vulnerable Software and Affected Versions: Infosoftbd Clcknshop version 1.0.0 Description: A critical issue affects the processing of the file /collection/all of the component GET Parameter Handler. The manipulation of the tag argument leads to sql injection. The attack may be initiat...
Design/Logic Flaw
An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...
Input validation
An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...
CVE-2023-31172 Incomplete Filtering of Special Elements
An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...
CVE-2023-31171 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See...
SUSE CVE-2023-41361
An issue was discovered in FRRouting FRR 9.0. bgpd/bgpopen.c does not check for an overly large length of the rcv software version...
CVE-2023-41361
An issue was discovered in FRRouting FRR 9.0. bgpd/bgpopen.c does not check for an overly large length of the rcv software version...
