12345 matches found
Cross site scripting
An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes do not sanitize the data that is displayed by...
CVE-2023-5562 Unsafe default allows for cross-site scripting attacks in KNIME Server and KNIME Business Hub
An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes do not sanitize the data that is displayed by...
CVE-2023-5562
KNIME Analytics Platform before 5.2.0 is vulnerable to cross-site scripting when used as an executor for KNIME Server or KNIME Business Hub. The root cause is an unsafe default configuration where JavaScript-based view nodes do not sanitize data by default, allowing inline JavaScript to run in th...
CVE-2023-5562 Unsafe default allows for cross-site scripting attacks in KNIME Server and KNIME Business Hub
An unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes do not sanitize the data that is displayed by...
The vulnerability of the Shutdown_coreserver component in the D-View 8 network device management platform allows a intruder to trigger a service failure.
The vulnerability of the Shutdowncoreserver component in the D-View 8 network device management platform is related to the lack of authentication before granting access to functions. Exploiting this vulnerability could allow a intruder to cause a service failure...
vantage6 Code Issue Vulnerability
vantage6 is a vantage6 open source priVAcy preserviNg federalTed leArningG infrastructure for Secure Insight eXchange. A code issue vulnerability exists in vantage6 versions prior to 3.3.3, which stems from the endpoint /api/collaboration/id/task is used to collect all tasks for a collaboration,...
CVE-2023-44996
Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...
CVE-2023-44996
Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...
CVE-2023-44996 WordPress Post View Count Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...
CVE-2023-44996
CVE-2023-44996 affects the WordPress plugin Post View Count (wp-simple-post-view) <= 1.8.2. Described as a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered by an unauthenticated attacker, potentially allowing abuse of authenticated user actions. Public sources agree on CSR...
Cross Site Scripting (XSS)
snipe/snipe-it is vulnerable to Cross Site Scripting XSS. The vulnerability is caused by not sanitizing/escaping asset history values while displaying the values on the browser on the view asset page. An attacker can inject malicious JavaScript while editing assets in the location field leading t...
WordPress Plugin Post View Count Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...
PT-2023-6395 · F5 · Big-Ip
Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: The issue concerns an Exposure of Sensitive Information vulnerability existing in an undisclosed BIG-IP TMOS shell tmsh command. This vulnerability may allow an authenticated attacker with...
PT-2023-29339 · WordPress · Naresh Parmar Post View Count
Name of the Vulnerable Software and Affected Versions: Naresh Parmar Post View Count plugin versions 1.8.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...
ATX Ucrypt Code Issue Vulnerability
ATX Ucrypt is a series of media distribution gateways over IP Q2IP from ATX America, Inc. It is designed to provide reliable and secure HD or SD programming to hotels or other commercial venues. A security vulnerability exists in ATX Ucrypt 3.5 and prior versions, which stems from the presence of...
PT-2023-27137 · Unknown · Atx Ucrypt
Name of the Vulnerable Software and Affected Versions: ATX Ucrypt versions 3.5 and earlier Description: The web interface of ATX Ucrypt allows authenticated users, or attackers using default credentials for the admin, master, or user account, to include files via a URL in the "/hydra/view/get cc...
The vulnerability of the InstallApplication class in the D-View 8 network device management platform allows a perpetrator to bypass authentication.
The vulnerability of the InstallApplication class in the D-View 8 network device management platform is related to the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to bypass authentication processes...
The vulnerability of the showUser method in the D-View 8 network device management platform allows a hacker to escalate their privileges.
The vulnerability of the “showUser” method in the D-View 8 network device management platform is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
Online Pizza Ordering System SQL注入漏洞
Online Pizza Ordering System is an online pizza ordering system. Online Pizza Ordering System suffers from a SQL injection vulnerability that can be exploited by an attacker to view, add, modify, or delete information in the back-end database via scripting...