GitLab 4.1 < 16.1.5 / 16.2 < 16.2.5 / 16.3 < 16.3.1 (CVE-2023-1279)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 where it was...

PT-2023-16794 · WordPress · Usm-Premium

Name of the Vulnerable Software and Affected Versions: USM-Premium WordPress plugin versions prior to 16.3 Description: The issue allows high-privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example, in...

Adobe InDesign RCE Vulnerabilities (APSB21-73) - Windows

Adobe Indesign is prone to multiple vulnerabilities. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Adobe InDesign <= 16.3 Multiple Arbitrary Code Execution Vulnerabilities (APSB21-73) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior or equal to 16.3. It is, therefore, affected by multiple arbitrary code execution vulnerabilities, as follows: - Accessing a memory location after the end of the buffer allows an unauthenticated, remote attacker to execute...

PT-2021-19204

Name of the Vulnerable Software and Affected Versions NCR Command Center Agent version 16.3 Description The issue allows for the remote, unauthenticated execution of an arbitrary command as SYSTEM. This is achieved by submitting a runCommand parameter within an XML document sent to port 8089. The...

CVE-2018-8827

The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, which allows an unauthenticated malicious user to embed JavaScript into the Log viewer interface via a crafted HTTP Referer header, aka XSS...