16963 matches found
The vulnerability of the 3D modeling software Argon Ashlar-Vellum lies in its uncontrolled search element, which allows a hacker to execute arbitrary code.
The vulnerability of the 3D modeling software Argon Ashlar-Vellum is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code...
PT-2023-29084 · Unknown · Kc Group E-Commerce
Name of the Vulnerable Software and Affected Versions: KC Group E-Commerce Software versions through 20231123 Description: The issue affects the KC Group E-Commerce Software, allowing for Reflected XSS due to improper neutralization of input during web page generation. The vendor was contacted...
BELL-CVE-2023-48706
Bulletin has no description...
CVE-2023-48706 Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite
Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later...
BELL-CVE-2023-48161
Bulletin has no description...
CVE-2021-22150
It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server...
PT-2023-30625 · WordPress · Venutius Bp Profile Shortcodes Extra
Name of the Vulnerable Software and Affected Versions: Venutius BP Profile Shortcodes Extra plugin versions = 2.5.2 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This allows for potentially malicious...
PT-2023-20412 · WordPress · My Youtube Channel
Name of the Vulnerable Software and Affected Versions: My YouTube Channel plugin versions = 3.23.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application th...
PT-2023-30601 · WordPress · Wpdiscuz
Name of the Vulnerable Software and Affected Versions: wpDiscuz plugin versions prior to 7.6.11 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web applicati...
PT-2023-30619 · Unknown · Themepoints Accordion
Name of the Vulnerable Software and Affected Versions: Themepoints Accordion plugin versions prior to 2.7 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For Themepoints Accordion plugin...
PT-2023-30591 · Mondula Gmbh · Multi Step Form
Name of the Vulnerable Software and Affected Versions: Mondula GmbH Multi Step Form plugin versions prior to 1.7.12 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended action...
[20240205] - Core - Inadequate content filtering within the filter code
Inadequate content filtering leads to XSS vulnerabilities in various components...
PT-2023-32203 · 3Dswymer · 3Dswymer
Name of the Vulnerable Software and Affected Versions: 3DSwymer versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2023x Description: The issue allows an attacker to execute arbitrary script code due to Stored Cross-site Scripting XSS vulnerabilities affecting 3DSwym in 3DSwymer. This enables the...
Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2023-91793)
Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. An out-of-bounds read vulnerability exists in Adobe After Effects versions...
PYSEC-2023-302
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding...
Unspecified Vulnerability in Adobe Acrobat Reader (CNVD-2025-16215)
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A security vulnerability exists in Adobe Acrobat Reader version 23.006.20360 and earlier and version 20.005.30524 and earlier, which can be exploited by an attacker ...
PT-2023-30408 · Yamcs · Yamcs
Name of the Vulnerable Software and Affected Versions: Yamcs version 5.8.6 Description: An issue in Yamcs allows attackers to send arbitrary telecommands in a Command Stack via Clickjacking. Recommendations: For Yamcs version 5.8.6, at the moment, there is no information about a newer version tha...
PT-2023-30556 · Korea Sns · Korea Sns
Name of the Vulnerable Software and Affected Versions: Korea SNS versions 1.6.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the use...