328 matches found
CVE-2023-47093
An issue was discovered in Stormshield Network Security SNS 4.0.0 through 4.3.21, 4.4.0 through 4.6.8, and 4.7.0. Sending a crafted ICMP packet may lead to a crash of the ASQ engine...
Time Slots Booking Calendar Security Breach
PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers Serbia. A security vulnerability exists in Time Slots Booking Calendar version 4.0, which stems from a CSV injection vulnerability in the ID field...
PT-2023-20433 · Ibm · Ibm Planning Analytics On Cloud Pak For Data
Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics on Cloud Pak for Data version 4.0 Description: The issue is caused by insecure network communication, which could allow an attacker on a shared network to obtain sensitive information. Recommendations: For IBM Planning...
CVE-2023-26542
Cross-Site Request Forgery CSRF vulnerability in Exeebit phpinfo WP plugin = 4.0 versions...
CVE-2023-27418
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Side Menu Lite – add sticky fixed buttons plugin = 4.0 versions...
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. PrestaShop themevolty v.4.0.8 version before the security vulnerability , the vulnerability stems from through...
CVE-2023-5467
The GEO my WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
CVE-2023-5467
The GEO my WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
CVE-2023-44245
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Leap Contractor Contact Form Website to Workflow Tool plugin = 4.0.0 versions...
PT-2023-5168 · Microsoft +1 · Windows +1
Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo Administration Console versions V4.0 through V4.0 Update 1 Description: The issue is related to a leak of information about files and directories in the administration console of the SIMATIC PCS neo system, which can lead to t...
CVE-2023-30995
IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268...
Hotel Booking System security vulnerability
Hotel Booking System is a hotel booking system. A security vulnerability exists in PHPJabbers Hotel Booking System version v4.0, which stems from a user enumeration vulnerability during password reset...
CVE-2023-32481
Wyse Management Suite versions prior to 4.0 contain a denial-of-service vulnerability. An authenticated malicious user can flood the configured SMTP server with numerous requests in order to deny access to the system...
Issabel PBX Cross-Site Request Forgery Vulnerability
Issabel PBX is a software application. A free and open source software that allows you to build communication tools for your organization. A cross-site request forgery vulnerability exists in Issabel PBX version v.4.0.0-6, which originates from a vulnerability that allows remote attackers to caus...
Issabel PBX Cross-Site Scripting Vulnerability
Issabel PBX is a software application. A free and open source software that allows you to build communication tools for your organization. A cross-site scripting vulnerability exists in Issabel PBX version v.4.0.0-6, which originates from a vulnerability that allows remote attackers to cause a...
Issabel PBX Cross-Site Request Forgery Vulnerability
Issabel PBX is a software application. A free and open source software that allows you to build communication tools for your organization. A security vulnerability exists in issabelPBX version v.4.0.0-6, which stems from the presence of a cross-site request forgery CSRF vulnerability that could...
IBM Cloud Pak for Data security vulnerabilities
IBM Cloud Pak for Data is a cloud-native solution from International Business Machines IBM that allows customers to use data and analyze it quickly and efficiently. A security vulnerability exists in IBM Cloud Pak for Data version 4.0 that stems from a denial of service that could result from a...
Moodle cross-site scripting vulnerabilities
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that stems from the presence of a cross-site scripting XSS vulnerability. Affected products a...
PT-2023-17683 · WordPress · Essential Blocks
Name of the Vulnerable Software and Affected Versions: The Essential Blocks plugin for WordPress versions up to, and including, 4.0.6 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the save function. This allows unauthenticated...