Netatalk 3.1.x < 3.1.17 RCE Vulnerability

Netatalk is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netatalk:netatalk...

Fedora: Security Advisory for mosquitto (FEDORA-2023-6a87c003c4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Chaty Plugin < 3.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:premio:chaty"; ifdescription...

CVE-2023-40757

User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

Food Delivery Script 安全漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.1, which stems from a user enumeration vulnerability during password reset...

CVE-2023-32543

Incorrect default permissions in the IntelR ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-37772

Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php...

CVE-2023-37772

Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php...

PT-2023-26103 · Unknown · Online Shopping Portal Project

Name of the Vulnerable Software and Affected Versions: Online Shopping Portal Project version 3.1 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Email parameter at the "/shopping/login.php" API endpoint. Recommendations: For Online...

Online Shopping Portal SQL注入漏洞

Online Shopping Portal is an open source online shopping portal from the individual developer Anuj Kumar. A security vulnerability exists in Online Shopping Portal Project version 3.1, which stems from a SQL injection vulnerability in the parameter Email...

TeleAdapt RoomCast TA-2400 信任管理问题漏洞

The TeleAdapt RoomCast TA-2400 is an all-in-one, self-contained, top-of-the-line content streaming box for guest rooms from TeleAdapt UK. A trust management issue vulnerability exists in TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1, which stems from the presence of an issue with the use of...

OpenSSL Information Disclosure Vulnerability (20230714) - Windows

OpenSSL is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

SimplePHPscripts Funeral Script PHP 跨站脚本漏洞

SimplePHPscripts Funeral Script PHP is a SimplePHPscripts open source system for funeral details. SimplePHPscripts Funeral Script PHP version 3.1 has a cross-site scripting vulnerability that stems from a problem with the file /preview.php, which can lead to cross-site scripting...

PT-2023-23593 · Unknown · Vert.X Stomp

Name of the Vulnerable Software and Affected Versions: Vert.x STOMP versions 3.1.0 through 3.9.16 Vert.x STOMP versions 4.0.0 through 4.4.2 Description: The Vert.x STOMP server processes client STOMP frames without checking that the client sent an initial CONNECT frame replied with a successful...

CVE-2023-23793

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Eightweb Interactive Read More Without Refresh plugin = 3.1 versions...

CVE-2023-30869

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1...

WordPress plugin Easy Digital Downloads 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

PT-2024-24336 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 3.1 through 4.10.18 XWiki Platform versions 14.10.18 and earlier XWiki Platform versions 15.5.4 and earlier XWiki Platform version 15.10-rc-1 and earlier Description: The issue allows execution of arbitrary code on the...

PT-2023-16917 · Hsycms · Hsycms

Name of the Vulnerable Software and Affected Versions: Hsycms version 3.1 Description: A problematic issue has been found in the file controllercate.php of the component Add Category Module. The manipulation of the title argument leads to cross site scripting. The attack may be launched remotely...

XWiki 3.1-milestone-1 < 13.10.9, 14.x < 14.4.4, 14.5.x < 14.7 Privilege Escalation Vulnerability (GHSA-8cw6-4r32-6r3h)

Xwiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescripti...