579 matches found
Couchbase Server Security Vulnerability
Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server 7.2.2 and earlier versions, which originates from a data reader th...
WordPress Plugin Custom Twitter Feeds Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-13295 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions through 7.2.2 Description: An issue was discovered in Couchbase Server where a data reader may cause a denial of service because of the OOM killer, leading to the application exiting. Recommendations: For versions...
Intel Ethernet Adapters and Intel Ethernet Controller I225 Manageability firmware security vulnerability
Intel Ethernet Adapters and Intel Ethernet Controllers are products of Intel Corporation, USA. Intel Ethernet Adapters are Ethernet adapters. Intel Ethernet Controllers are Ethernet controllers. Intel Ethernet Adapters and Intel Ethernet Controllers are products of Intel Corporation. A security...
PT-2024-18237 · Zhongbangkeji · Crmeb
Name of the Vulnerable Software and Affected Versions: ZhongBangKeJi CRMEB version 5.2.2 Description: A critical issue affects the function save/delete of the file "/adminapi/system/crud". The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The...
CVE-2024-24933
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Prasidhda Malla Honeypot for WP Comment allows Reflected XSS.This issue affects Honeypot for WP Comment: from n/a through 2.2.3...
PT-2024-20640 · Unknown · Ari Soft Contact Form 7 Connector
Name of the Vulnerable Software and Affected Versions: ARI Soft Contact Form 7 Connector versions 1.2.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the ARI Soft Contact Form 7 Connector. This type of issue allows an attacker to trick a user into performing unintended...
CVE-2022-23221
creationtimestamp| type| source ---|---|--- 2024-02-09 02:16:41+00:00| seen| https://t.me/ctinow/181760 2026-07-16 19:00:15+00:00| seen| Telegram/6m6dGls3SVbnMfcPh4fTGVTtq9PMFkzO8XLFjObpdXkqs 2026-07-17 00:00:31+00:00| seen| Telegram/6m6dGls3SVbnMfcPh4fTGVTtq9PMFkzO8XLFjObpdXkqs 2026-07-18...
QNAP Systems QuMagie SQL Injection Vulnerability
QNAP Systems QuMagie is a QTS photo management application from QNAP Systems. A SQL injection vulnerability exists in QNAP Systems QuMagie prior to version 2.2.1, which stems from the presence of a SQL injection vulnerability that could allow an authenticated user to inject malicious code over th...
CVE-2023-41171
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 3 of 4...
CVE-2023-47645
Cross-Site Request Forgery CSRF vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login allows Cross Site Request Forgery.This issue affects RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User...
BigProf Online Clinic Management System Cross-Site Scripting Vulnerability
BigProf Online Clinic Management System is an online clinic management system from BigProf, Inc. A cross-site scripting vulnerability exists in BigProf Online Clinic Management System version 2.2, which stems from a cross-site scripting vulnerability in the FirstRecord parameter of...
PT-2023-30650 · WordPress · Wpforo Forum
Name of the Vulnerable Software and Affected Versions: wpForo Forum versions through 2.2.6 Description: The issue is related to Cross-Site Request Forgery CSRF and Missing Authorization, allowing unauthorized access to functionality not properly constrained by Access Control Lists ACLs. This can...
PT-2023-30779 · Unknown · Vikas Vatsa Display Custom Post
Name of the Vulnerable Software and Affected Versions: Vikas Vatsa Display Custom Post versions n/a through 2.2.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...
PortlandLabs Concrete CMS Security Vulnerability
PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. A security vulnerability exists in PortlandLabs Concrete CMS prior to 8.5.13 and versions prior to 9.2.2, which stems from a File creation function that may grant too many permissions when...
Moodle Security Breach
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle versions prior to 4.2 through 4.2.2, 4.1 through 4.1.5, 4.0 through 4.0.10, 3.11 through...
CVE-2023-22719
Improper Neutralization of Formula Elements in a CSV File vulnerability in GiveWP.This issue affects GiveWP: from n/a through 2.25.1...
PT-2023-28673 · Ibm · Ibm Sterling Partner Engagement Manager
Name of the Vulnerable Software and Affected Versions: IBM Sterling Partner Engagement Manager versions 6.1.2, 6.2.0, and 6.2.2 Description: The issue is related to improper authentication, which could allow a remote user to perform unauthorized actions. Recommendations: For versions 6.1.2, 6.2.0...
CVE-2023-4635
The EventON plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...