1949 matches found
PT-2023-14543 · Unknown · Posts/Users Stats
Name of the Vulnerable Software and Affected Versions: Posts and Users Stats versions 1.1.3 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects Posts and Users Stats. Recommendations: For versions 1.1.3 and earlier, update ...
PT-2023-27925 · Galaxy Software Services · Vitals Esp
Name of the Vulnerable Software and Affected Versions: Galaxy Software Services Corporation Vitals ESP affected versions not specified Description: The issue is related to insufficient filtering and validation during file upload in an online knowledge base management portal. An authenticated remo...
PT-2023-29897 · Scientech It Solution · Scientech It Solution Appointment Calendar
Name of the Vulnerable Software and Affected Versions: Scientech It Solution Appointment Calendar plugin versions = 2.9.6 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...
BELL-CVE-2023-45145
Bulletin has no description...
BELL-CVE-2023-38470
Bulletin has no description...
BELL-CVE-2023-35789
Bulletin has no description...
BELL-CVE-2023-31486
Bulletin has no description...
CVE-2023-22113
...
BELL-CVE-2023-43789
Bulletin has no description...
BELL-CVE-2023-39189
Bulletin has no description...
CVE-2023-43898
Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbiconvertformat. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted pic file...
PT-2023-29129 · WordPress · Jesweb.Dev Anchor Episodes Index
Name of the Vulnerable Software and Affected Versions: jesweb.Dev Anchor Episodes Index Spotify for Podcasters plugin versions = 2.1.7 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For...
CVE-2023-42753
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...
CVE-2023-43373
Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the nutenteagg parameter at /hoteldruid/interconnessioni.php...
Dropbox Folder Share <= 1.9.7 - Unauthenticated Server-Side Request Forgery via 'link'
Description The Dropbox Folder Share plugin plugin was affected by an Unauthenticated Server-Side Request Forgery SSRF security vulnerability...
BELL-CVE-2023-25585
Bulletin has no description...
BELL-CVE-2023-3301
Bulletin has no description...
Integer Overflow
libgpac.so is vulnerable to Integer Overflow. The vulnerability is caused by a defect in function mp4muxinitializemovie in a file filters/muxisom.c. A attacker can exploit this vulnerability to mount a Denial Of Service DOS attack...