2718 matches found
Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
The plugin does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file PoC POST /wp-admin/admin-ajax.php...
CVE-2022-21941
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system...
Command injection
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system...
CVE-2022-21941 iSTAR Ultra
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system...
CVE-2022-27563
An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...
CVE-2022-27563
An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...
Denial of service
An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...
CVE-2022-27563
CVE-2022-27563 affects HCL VersionVault Express. An unauthenticated attacker can overload a section of VersionVault Express, producing a denial-of-service condition. Public references in the dataset cite affected versions (e.g., HCL VersionVault Express 2.0.1/2.1.0 in CNVD) and describe the impac...
CVE-2022-27563 Overload/denial of service affects HCL VersionVault Express
An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...
PT-2022-18486 · Hcl · Hcl Versionvault Express
Name of the Vulnerable Software and Affected Versions: HCL VersionVault Express affected versions not specified Description: An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service. Recommendations: At the moment, there is no information about a newer...
CVE-2022-27563
An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...
Cross site scripting
Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter...
CVE-2022-35654
CVE-2022-35654 affects Pegasystem PEGA Platform (versions 8.5.4–8.7.3). The issue is an unauthenticated cross-site scripting (XSS) vulnerability triggered via the redirect parameter. Red Hat and other sources corroborate the XSS finding; public details specify impacted versions and the vulnerable...
CVE-2022-35654
Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter...
DoS via Client Email Update
Description An unauthenticated user, via the Inbox Website Widget, can update its contact email information, whose field doesn't have any proper size restriction or limitation in place, allowing to set as email an unlimited number of characters. \ \ Because of this an attacker can send an enormou...
Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Deletion
The plugin does not have any authorisation and CSRF checks in place when deleting events which could allow unauthenticated attackers to delete arbitrary events As an unauthenticated user, open the code below, this will delete the event with ID 4 from the calendar with ID 1...
Improper access control
Improper access control in firmware for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2022-21212
Improper input validation for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...