QNAP Systems Music Station Path Traversal Vulnerability

QNAP Systems Music Station is a music playback and management application from QNAP Systems. A path traversal vulnerability exists in QNAP Systems Music Station 5.3.22 and earlier versions that could allow an authenticated user to read the contents of an unexpected file and expose sensitive data...

QNAP Systems Music Station Path Traversal Vulnerability

QNAP Systems Music Station is a music playback and management application from QNAP Systems. A path traversal vulnerability exists in QNAP Systems Music Station 5.3.22 and earlier versions that could allow an authenticated user to read the contents of an unexpected file and expose sensitive data...

Dover Fueling Solutions MAGLINK LX Console Access Control Error Vulnerability

The Dover Fueling Solutions MAGLINK LX Console is Dover Fueling Solutions' integrated console for fuel stations and oil distribution. This console is designed to help manage various operations at fuel stations, including refueling, payment, data monitoring, and oil management. An access control...

CVE-2023-28584

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement CSA...

CVE-2023-33019

Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...

Code injection

Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...

CVE-2023-33019

CVE-2023-33019 describes a Transient Denial of Service in the WLAN Host when a mobile station processes a Channel Switch Announcement (CSA) with an invalid channel. Public sources associate this CVE with Qualcomm WLAN components (high severity, CVSSv3.1: 7.5; network attack vector, no user intera...

PT-2023-24142 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: WLAN Host affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the WLAN Host when a mobile station receives an invalid channel in the Channel Switch Announcement CSA Information Element IE...

PT-2023-9131 · Synology · Video Station

Name of the Vulnerable Software and Affected Versions: Video Station versions prior to 5.7.2 Description: An OS command injection issue has been reported, potentially allowing users to execute commands via a network. The vulnerability is related to the failure to neutralize special elements used ...

PT-2023-9132 · Synology · Video Station

Name of the Vulnerable Software and Affected Versions: Video Station versions prior to 5.7.2 Description: A SQL injection issue affects Video Station, related to a lack of protection against SQL query structure attacks. This could allow a remote attacker to execute arbitrary code by injecting...

CVE-2023-32499

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tony Zeoli, Tony Hayes Radio Station by netmix® – Manage and play your Show Schedule in WordPress! plugin = 2.4.0.9 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tony Zeoli, Tony Hayes Radio Station by netmix® – Manage and play your Show Schedule in WordPress! plugin = 2.4.0.9 versions...

CVE-2023-32499

CVE-2023-32499 corresponds to a WordPress plugin vulnerability in the Radio Station plugin by netmix (WordPress plugin: Radio Station). Connected sources confirm an unauthenticated Reflected Cross-Site Scripting (XSS) condition affecting version(s)

CVE-2023-32499 WordPress Radio Station Plugin <= 2.4.0.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tony Zeoli, Tony Hayes Radio Station by netmix® – Manage and play your Show Schedule in WordPress! plugin = 2.4.0.9 versions...

Radio Station < 2.5.0 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress plugin Radio Station 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-40751

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s mac80211 module related to client probing. Specifically, the code did not first verify the existence of a client before checking the channel context,...

PT-2023-26256 · Unknown · Chengdu Flash Flood Disaster Monitoring/Warning System

Name of the Vulnerable Software and Affected Versions: Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0 Description: A problematic vulnerability has been found in the Chengdu Flash Flood Disaster Monitoring and Warning System. This issue affects an unknown part of the file...

WordPress Radio Station Plugin < 2.5.5 is vulnerable to Cross Site Scripting (XSS)

Software Radio Station Type Plugin Vulnerable versions 2.5.5 Fixed in 2.5.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 51403d09ff9c Credits Rafie Muhammad Patchstack Required...

WordPress Station Pro Plugin < 2.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Station Pro Type Plugin Vulnerable versions 2.3.4 Fixed in 2.3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d46c92672929 Credits Rafie Muhammad Patchstack Required...