CVE-2023-48692 Azure RTOS NetX Duo Remote Code Execution Vulnerability

Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to icmp,...

PT-2023-30779 · Unknown · Vikas Vatsa Display Custom Post

Name of the Vulnerable Software and Affected Versions: Vikas Vatsa Display Custom Post versions n/a through 2.2.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

VulnCheck KEV: CVE-2021-21389

BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in...

PT-2023-27540

Name of the Vulnerable Software and Affected Versions Apache Superset versions up to but excluding 2.1.2 Description The issue is related to an improper authorization check, which could lead to possible privilege escalation. Using the default examples database connection, an attacker could access...

CVE-2023-47765

Cross-Site Request Forgery CSRF vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin = 2.1.9 versions...

Autodesk Desktop Connector Code Issue Vulnerability

Autodesk Desktop Connector is a desktop connection software from Autodesk, Inc. A security vulnerability exists in Autodesk Desktop Connector 16.2.1 and earlier versions, which stems from a maliciously crafted DLL file that could be forced to install to a non-default location and could be used by...

GIFLIB Security Vulnerability

GIFLIB is a library for reading and editing gif images. A security vulnerability exists in GIFLIB version 5.2.1, which originated from a vulnerability that allows local attackers to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c. The vulnerability is caused by the use o...

PT-2023-7501 · Microsoft · Azure Rtos Netx Duo

Name of the Vulnerable Software and Affected Versions: Azure RTOS NetX Duo versions 6.2.1 and below Description: The issue is related to a memory overflow vulnerability in the Azure RTOS NetX Duo TCP/IP network stack, which can be exploited by an attacker to achieve remote code execution. The...

CVE-2023-33304

A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials...

AZL-34865 CVE-2023-6111 affecting package kernel for versions less than 6.6.29.1-4

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. The function nfttransgccatchall did not remove the catchall set element from the catchalllist when the argument sync is true, making it possible to free a...

CVE-2023-34025

Cross-Site Request Forgery CSRF vulnerability in LWS LWS Hide Login plugin = 2.1.6 versions...

PT-2023-24709 · WordPress · Alex Raven Wp Report Post

Name of the Vulnerable Software and Affected Versions: Alex Raven WP Report Post plugin versions = 2.1.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

Couchbase Server Security Vulnerability

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server that stems from the presence of a directory traversal vulnerabilit...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image scaling. PrestaShop boninstagramcarousel v5.2.1 version to v7.0.0 prior to the version of a security vulnerability , th...

SUSE CVE-2020-14836

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

zzzCMS Code Issues Vulnerabilities

ZZZCMS is a content management system CMS. A security vulnerability exists in zzzCMS version v.2.1.9, which can be exploited by remote attackers to execute arbitrary code by changing the imageext parameter from jpg, jpeg, gif, and png to jpg, jpeg, gif, png, pphphp...

Missing Release of Resource after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime via the AuthenticationService. A cached token persists after the lifetime of the request due to an improper implementation of relations between ITokens and IUsers. An attacker can cau...

CVE-2023-5357 Instagram for WordPress <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Instagram for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

CVE-2023-43884

A Cross-site scripting XSS vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Reference ID' parameter...

SUSE CVE-2023-41053

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by SORTRO and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been...