379 matches found
phiola 安全漏洞
phiola is a fast audio player, recorder, and converter for Windows, Linux, and Android by Simon Zolin Personal Developer. A security vulnerability exists in phiola version v2.0-rc22, which originates from a vulnerability that allows remote attackers to cause a denial of service via a crafted wav...
WordPress Min and Max Purchase for WooCommerce plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Min and Max Purchase for WooCommerce versions = 2.0.0...
Adive Framework 跨站脚本漏洞
Adive Framework is a PHP-based MySQL database management framework. A cross-site scripting vulnerability exists in Adive Framework version 2.0.8, which stems from a failure to adequately encode user-controlled input, leading to a cross-site scripting XSS vulnerability that allows an attacker to...
GT3 Soluciones SWAL 跨站脚本漏洞
GT3 Soluciones SWAL is an application from GT3 Soluciones, Inc. A cross-site scripting vulnerability exists in GT3 Soluciones SWAL version 2.0 r2301, which stems from a reflected cross-site scripting XSS vulnerability in the Title parameter...
PT-2024-23238 · Anope +3 · Anope +3
Name of the Vulnerable Software and Affected Versions: Anope versions prior to 2.0.15 Description: The issue allows resetting the password of a suspended account. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...
PT-2024-20796 · Snow Snow · Snow Snow
Name of the Vulnerable Software and Affected Versions: snow snow version 2.0.0 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the dataScope parameter of the "system/role/list" interface. This enables the attacker to potentially access and manipulate...
PT-2024-22752 · Unknown · Contact Form 7 – Paypal & Stripe Add-On
Name of the Vulnerable Software and Affected Versions: Contact Form 7 – PayPal & Stripe Add-on versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...
PT-2024-14134 · Pixelemu · Terraclassifieds
Name of the Vulnerable Software and Affected Versions: TerraClassifieds versions through 2.0.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Pixelemu TerraClassifieds. Recommendations: For versions through 2.0.3, update to a version later than 2.0.3 to resolve the...
Md1health Md1patient Security Breach
Md1health Md1patient is a medical software from Md1health. A security vulnerability exists in Md1health Md1patient version v2.0.0, which stems from the presence of a cross-site scripting XSS vulnerability that could allow an attacker to execute arbitrary web script or HTML via a specially crafted...
Intel ACAT software security vulnerability
Intel ACAT is an open source platform from Intel Corporation. A security vulnerability exists in Intel ACAT software prior to version 2.0.0, which stems from an incorrect default privilege issue that could lead to privilege escalation via local access by an authenticated user...
PT-2024-19335 · Ibm · Ibm Storage Defender - Resiliency Service
Name of the Vulnerable Software and Affected Versions: IBM Storage Defender - Resiliency Service version 2.0 Description: The issue allows a local user to read user credentials stored in plain clear text. Recommendations: For IBM Storage Defender - Resiliency Service version 2.0, consider...
Software Publico e-Sic Livre Code Issue Vulnerability
Software Publico e-Sic Livre is a solution from the Brazilian company Software Publico designed to manage public services based on Q&A. A code issue vulnerability exists in Software Publico e-Sic Livre v.2.0 and prior versions, which stems from the presence of a file upload vulnerability that cou...
beetl-bbs Security Vulnerabilities
beetl-bbs is a forum system by xiandafu's personal developer. A security vulnerability exists in version 2.0 of beetl-bbs, which stems from a stored cross-site scripting XSS vulnerability in the post/save content parameter...
Apollo Authorization Issues Vulnerabilities
Apollo is a set of PHP scripts by Alex Breen, an individual developer. It is intended to provide a web-based interface for students to upload course assignments. An authorization issue vulnerability exists in Apollo versions 2.0.0 and 2.0.1, which stems from the inclusion of unknown functions in...
IBM Planning Analytics 代码问题漏洞
IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines IBM. The solution supports automated execution of processes such as business planning, budgeting and analysis. A code issue vulnerability exists in IBM Planning Analytics version 2.0,...
CVE-2023-50639
Cross Site Scripting XSS vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page...
CVE-2023-49844
Cross-Site Request Forgery CSRF vulnerability in Kevin Ohashi WPPerformanceTester.This issue affects WPPerformanceTester: from n/a through 2.0.0...
PT-2023-31105 · Zealousweb · Zealousweb Track Geolocation Of Users Using Contact Form 7
Name of the Vulnerable Software and Affected Versions: ZealousWeb Track Geolocation Of Users Using Contact Form 7 versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS...
PT-2023-22033 · Unknown · Veon Computer Service Tracking
Name of the Vulnerable Software and Affected Versions: Veon Computer Service Tracking Software versions prior to 2.0 Veon Computer Service Tracking Software versions through 20231122 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special...