8513 matches found
CouchCMS Input Validation Error Vulnerability
CouchCMS is an open source content management system CMS for designers. A security vulnerability exists in CouchCMS version v2.3. An attacker exploited the vulnerability to redirect victim users to an arbitrary website via a specially crafted URL...
CVE-2023-41575
Multiple stored cross-site scripting XSS vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full Name, Message, or Address parameters...
PT-2023-5660 · Unknown · Blood Bank & Donor Management
Name of the Vulnerable Software and Affected Versions: Blood Bank & Donor Management version 2.2 Description: The issue concerns multiple stored cross-site scripting XSS vulnerabilities in the /bbdms/sign-up.php file. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML...
CVE-2023-4792
The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicateppmcpostasdraft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with...
WordPress plugin Duplicate Post Page Menu & Custom Post Type security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2023-27837 · Usermin · Usermin
Name of the Vulnerable Software and Affected Versions: Usermin version 2.000 Description: Multiple stored cross-site scripting XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the key comment to different pages, including public key details, Export key, sign...
Apache Superset 安全漏洞
Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset version 2.1.0 and prior versions have an authorization issue vulnerability that stems from incorrect authorization checks in SQLLab. An attacker can exploit the vulnerability to...
mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server
A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0...
CVE-2023-3616
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mava Software Hotel Management System allows SQL Injection.This issue affects Hotel Management System: before 2.0...
CVE-2023-35065
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Osoft Paint Production Management allows SQL Injection. This issue affects Paint Production Management: before 2.1...
kernel: buffer overflow in ceph file net/ceph/messenger_v2.c
An flaw was found in net/ceph/messengerv2.c in the Linux Kernel. An integer signing error leads to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This issue occurs due to an untrusted length taken from a TCP packet in cephdecode32...
Digita Information Technology Smartrise Document Management System SQL Injection Vulnerability
Digita Information Technology Smartrise Document Management System is a document management system from Digita Information Technology, Turkey. A SQL injection vulnerability exists in Digita Information Technology Smartrise Document Management System Hvl-2.0 prior versions, which stems from...
Bolo Code Issue Vulnerability
Bolo is a Java-based pineapple blogging system, simple and easy to deploy, exquisite theme, intimate service, designed for programmers. A security vulnerability exists in Bolo v.2.6, which stems from a file upload issue...
The vulnerability of the httpd microprogramming system in Wi-Fi routers from NETGEAR R6400v2 allows a intruder to execute arbitrary code.
The vulnerability of the httpd microprogramming system in NETGEAR R6400v2 Wi-Fi routers lies in the fact that the execution of operations goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web page...
UBUNTU-CVE-2023-4756
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...
GPAC Buffer Error Vulnerability
GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.3-DEV that stems from the presence of a stack-based buffer overflow issue...
OESA-2023-1581 libreswan security update
Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. Security Fixes: An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains ...
GPAC Input Validation Error Vulnerability
GPAC is an open source multimedia framework. An input validation error vulnerability exists in versions prior to gpac 2.3-DEV that stems from the presence of an integer overflow or wrap-around issue...
DEBIAN-CVE-2023-40567
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the cleardecompressbandsdata function in which there is no offset validation. Abuse of this vulnerability may lead to an out of bounds...