3294 matches found
WordPress Auto Amazon Links plugin <= 5.4.2 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Auto Amazon Links versions = 5.4.2...
PT-2024-39584 · WordPress · Auto Amazon Links – Amazon Associates Affiliate Plugin
Name of the Vulnerable Software and Affected Versions: The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress versions up to, and including, 5.4.2 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate...
PYSEC-2024-100
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. The login functionality contains a reflected cross-site scripting XSS vulnerability. This vulnerability is fixed in 5.19.0. Note: This CVE only affects Open Source Edition, and...
Malicious code in algoliasearch-v5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 855faa64da2f22ef512ead61e2ee68ababe304f51a2f9a0e0daeff0443902fa2 The OpenSSF Package Analysis project identified 'algoliasearch-v5' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
CVE-2024-46510
ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interface...
PT-2024-32018 · Unknown · Esafenet Cdg
Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A SQL injection issue was discovered in the NavigationAjax interface via the id parameter. This could potentially lead to unauthorized access and data theft. There is no information provided about the...
Infinera hiT 7300 安全漏洞
The Infinera hiT 7300 is a software-defined networking SDN-ready coherent packet-optical transport system from Infinera USA. A security vulnerability exists in the Infinera hiT 7300 version 5.60.50 that stems from a hidden SSH service with hard-coded credentials that allows an attacker to access...
EsafeNet CDG 安全漏洞
EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which is caused by a SQL injection vulnerability in the id parameter of the NavigationAjax interface...
WordPress Advanced File Manager plugin <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability
Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by TANG Cheuk Hei siunam in WordPress Plugin Advanced File Manager versions = 5.2.8...
WordPress plugin Advanced File Manager 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Bold Page Builder versions = 5.1.1...
Zyxel VMG8825-T50K 缓冲区错误漏洞
The Zyxel VMG8825-T50K is an Internet access device from China Hopkins Zyxel. A buffer error vulnerability exists in Zyxel VMG8825-T50K version 5.50ABOM.8C0 and prior versions, which arises from the parameter type parser improperly restricting operations within the range of a memory buffer...
Rapid SCADA 安全漏洞
Rapid SCADA is a full-featured SCADA software from Rapid SCADA Open Source. A security vulnerability exists in Rapid SCADA version 5.8.4, which originates in the file ScadaServerEngine/MainLogic.cs where CheckUser allows the use of empty passwords...
Vulnerabilities fixed in Ivanti Cloud Services Appliance
Ivanti has fixed vulnerabilities in Cloud Services Appliance v 4.6. A malicious party could exploit the vulnerabilities to execute a command-injection via path-traversal, allowing the system to be operated and possibly taken over without prior authentication. Ivanti says it has information that t...
Exploit for Cross-Site Request Forgery (CSRF) in Creativeitem Academy_Lms
CVE-2022-47132 Academy LMS = 5.10 CSRF Description Acad...
AZL-49675 CVE-2024-46784 affecting package kernel for versions less than 5.15.182.1-1
In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in manacreatetxq/rxq's NAPI cleanup Currently napidisable gets called during rxq and txq cleanup, even before napi is enabled and hrtimer is initialized. It causes kernel panic. ?...
Yordam Library Automation System 安全漏洞
Yordam Library Automation System is an application from Yordam, Inc. A security vulnerability exists in Yordam Library Automation System prior to version 5.0, which stems from an unauthorized exposure of sensitive information vulnerability that allows retrieval of embedded sensitive data...
DesDev DedeCMS 跨站脚本漏洞
DesDev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China Zhuozhuo DesDev. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in DesDev DedeCMS...
