5314 matches found
PT-2023-7951 · D Link · D-Link G416
Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. The specific flaw exists within the HTTP service listening on TC...
CVE-2023-21251
In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...
Cisco SD-WAN vManage 授权问题漏洞
Cisco SD-WAN vManage is a highly customizable dashboard from Cisco, Inc. that simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. Cisco SD-WAN vManage suffers from an input validation error vulnerability that stems from insufficient request validatio...
PT-2023-24339 · WordPress · User Registration
Name of the Vulnerable Software and Affected Versions: User Registration plugin for WordPress versions up to, and including, 3.0.2 Description: The issue arises from a hardcoded encryption key and missing file type validation on the ur upload profile pic function. This allows authenticated...
Design/Logic Flaw
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...
CVE-2023-3525
The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without...
PT-2023-12537 · WordPress · Slider Hero
Name of the Vulnerable Software and Affected Versions: Slider Hero plugin for WordPress versions up to and including 8.2.0 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the qc slider hero duplicate function. This allows...
PT-2023-3812 · Microsoft · Odbc Driver +1
Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft ODBC Driver. This can be exploited by a remote attacker to execute arbitrary code. The vulnerability...
PT-2023-3863 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Extended Negotiation component of the Windows operating system. This can be exploited by a remote attacker to perform a...
Siemens RUGGEDCOM ROX 命令注入漏洞
RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A command injection vulnerability exists in the Siemens RUGGEDCOM ROX, which stems from a lack of server-side input validation, making the SCEP CA...
The vulnerability of the LibreOffice office software package, related to insufficient validation of requests on the server side, allows a hacker to gain access to the file system.
The vulnerability of the LibreOffice office software package is related to insufficient testing of server-side requests. Exploiting this vulnerability could allow a malicious actor to gain access to the file system using specially crafted ODT files...
PT-2023-22851 · Unknown · Lsoitemdata
Name of the Vulnerable Software and Affected Versions: LSOItemData versions prior to SMR Jul-2023 Release 1 Description: The issue is related to improper input validation in LSOItemData, allowing attackers to launch certain activities. Recommendations: For versions prior to SMR Jul-2023 Release 1...
SAMSUNG Mobile device 缓冲区错误漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile device SMR Jul-2023 Release 1 version, which stems from an incorrect input validation vulnerability ...
Apache Any23 输入验证错误漏洞
Apache Any23 is a library, web service, and command-line tool from the Apache Foundation USA. Apache Any23 suffers from a denial of service vulnerability due to a usage flaw in TikaEncodingDetector. An attacker could exploit this vulnerability to cause memory overuse...
The vulnerability of the software and hardware components of SCADA systems, such as the ABB Pulsar Plus System Controller NE843_S, Infinity DC Power Plant H5692448 G104, Infinity DC Power Plant H5692448 G842, Infinity DC Power Plant H5692448 G224L, Infinity DC Power Plant H5692448 G630-4, Infinity DC Power Plant H5692448 G451C(2), Infinity DC Power Plant H5692448 G461(2), arises due to insufficient validation of input data. This vulnerability allows attackers to execute CSRF attacks.
The vulnerabilities of the software and hardware components of SCADA systems, such as ABB Pulsar Plus System Controller NE843S, Infinity DC Power Plant H5692448 G104, Infinity DC Power Plant H5692448 G842, Infinity DC Power Plant H5692448 G224L, Infinity DC Power Plant H5692448 G630-4, Infinity D...
WordPress plugin Protect WP Admin 输入验证错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error vulnerabilit...
PT-2023-25319
Name of the Vulnerable Software and Affected Versions Apache Airflow Hive Provider versions prior to 6.1.1 Description The issue is related to improper input validation, which allows bypassing a security check, potentially leading to remote code execution RCE via the principal parameter. This can...
CVE-2023-28324
A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote code execution...
WordPress Plugin Cool Timeline 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...