247 matches found
PT-2024-39136 · WordPress · Daily Prayer Time
Name of the Vulnerable Software and Affected Versions: Daily Prayer Time plugin for WordPress versions up to, and including, 2024.08.26 Description: The issue arises from insufficient escaping on the user-supplied max word attribute of the quran verse shortcode and lack of sufficient preparation ...
WordPress Popularis Verse theme <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Popularis Verse versions = 1.1.1...
WordPress Popularis Verse Theme <= 1.1.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Popularis Verse Type Theme Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-38763 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID be4cf6f1e0c0 Credits Dhabaleshwar Das...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-4941 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-4941 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-4941 Source advisory: OSV:PYSEC-2024-184...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-4253 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-4253 Source advisory: OSV:PYSEC-2024-321...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-34511 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-34511 Source advisory: OSV:GHSA-34RF-P3R3-58X2...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-34510 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-34510 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-34510 Source advisory: OSV:PYSEC-2024-255...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-1561 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-1561 Source advisory: OSV:GHSA-G9CJ-CFPP-4G2X...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-1183 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-1183 Source advisory: OSV:GHSA-QH6X-J82H-VPF9...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-1729 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-1729 Source advisory: OSV:GHSA-HMX6-R76C-85G9...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2023-51449 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2023-51449 Source advisory: OSV:PYSEC-2023-249...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2023-6572 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...
fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2023-6572 via gradio (3.36.1)
gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2023-6572 Source advisory: OSV:PYSEC-2023-255...
udadmin_server Code Execution
The vulnerability of the udadminserver service in the Rocket Software UniData and UniVerse platforms is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-37496
HCL Verse is susceptible to a Stored Cross Site Scripting XSS vulnerability. An attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information...
CVE-2023-37496
HCL Verse is susceptible to a Stored Cross Site Scripting XSS vulnerability. An attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information...
Cross site scripting
HCL Verse is susceptible to a Stored Cross Site Scripting XSS vulnerability. An attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information...
CVE-2023-37496 HCL Verse is susceptible to a Stored Cross-Site Scripting (XSS) Vulnerability
HCL Verse is susceptible to a Stored Cross Site Scripting XSS vulnerability. An attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information...