Gallagher Controller 6000 Security Vulnerability

The Gallagher Controller 6000 is an interface between the Gallagher Command Center server and distributed field hardware from Gallagher New Zealand. A security vulnerability exists in Gallagher Controller 6000 versions prior to 8.70 vCR8.70.231204a, v8.60 and earlier, which stems from the presenc...

Zoom VDI Client Security Vulnerability

Zoom VDI Client is a server-based computing model client from Zoom USA that allows you to deliver desktop images to endpoint devices over a network. A security vulnerability exists in Zoom. An attacker has exploited the vulnerability to perform privilege escalation via network access. The followi...

Mitsubishi Electric GX Works2 input validation error vulnerability

The Mitsubishi Electric GX Works2 is a programmable controller from Mitsubishi Electric Japan. The Mitsubishi Electric GX Works2 suffers from an input validation error vulnerability that can be exploited by an attacker to cause a denial of service for certain functions by sending specially crafte...

WordPress Plugin Forms for Mailchimp by Optin Cat - Grow Your MailChimp List Security Breach

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Forms for Mailchimp by Optin Cat - Grow...

Intelbras RX 1500 Security Vulnerability

The Intelbras RX 1500 is a dual-band router from Intelbras in Brazil. A security vulnerability exists in Intelbras RX 1500 version 1.1.9. An attacker can exploit the vulnerability to perform cross-site scripting attacks...

WordPress Plugin UpdraftPlus Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

Huawei HarmonyOS Security Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions prior to 4.0.0, 3.0.0, and 2.0.0. The vulnerability stems from an authentication bypass...

Pimcore Security Vulnerability

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce framework and product information management applications. A security vulnerability exists in Pimcore...

ArgoCD Path Traversal Vulnerability

ArgoCD is a software application. A declarative GitOps continuous delivery tool for Kubernetes. It continuously monitors running applications and compares the current live state with the desired target state e.g., configuration in a Git repository, automatically synchronizing and deploying...

AMD DXE Driver Security Vulnerability

AMD DXE driver is a driver from UltraMicroelectronics AMD. A security vulnerability exists in AMD DXE Driver, which stems from improper initialization of variables in the driver, and could allow a privileged user to disclose sensitive information via local access...

Pegasystem PEGA Platform Cross-Site Scripting Vulnerability

Pegasystem PEGA Platform is a suite of application development platforms from the US-based Pegasystem. The platform is used to develop applications such as BPM Business Process Management, Case Management, Real-Time Decision Making, and CRM Customer Relationship Management. A security vulnerabili...

Snappy Code Issue Vulnerability

Snappy is a PHP library from KNP Labs Individual Developers that allows thumbnails, snapshots, or PDFs to be generated from url or html pages. Snappy is vulnerable to a code issue. An attacker can exploit this vulnerability to remotely execute code...

Adobe Acrobat Reader buffer error vulnerability

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Siemens RUGGEDCOM security vulnerabilities

RUGGEDCOM ros-based devices, typically switches and serial-to-Ethernet devices, are used to connect equipment that operates in harsh environments, such as power substations and traffic control cabinets. A mirrored port isolation vulnerability exists in Siemens RUGGEDCOM ROS devices, which can be...

Microsoft .NET Framework Security Vulnerabilities

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...

FreeBSD Security Vulnerabilities

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD versions 13.1 and 13.2, which stems from a buffer overflow vulnerability in the fwctl driver state machine. The vulnerability can be exploited to execute arbitrary code as root ...

Oracle Virtualization security vulnerabilities

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtu...

WordPress Plugin Smart YouTube PRO: Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Samsung Mobile Devices Buffer Error Vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile device SMR Jul-2023 Release 1 version, which originates from a heap out-of-bounds write vulnerabilit...

WordPress plugin KiviCare Management System has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

XWiki Platform Cross-site Scripting Vulnerabilities

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the XWiki Foundation in France. A security vulnerability exists in XWiki Platform. An attacker could use this vulnerability to inject Javascript code into a page by forging a URL and trigger a cross-site...

Webkul QloApps Cross-Site Script Vulnerability

Webkul QloApps is a free and open source hotel reservation and online booking system. A security vulnerability exists in Webkul QloApps version 1.6.0, which stems from a cross-site scripting XSS vulnerability. An attacker can use this vulnerability to obtain a user's session cookie and then emula...

IBM PowerVM Hypervisor security vulnerabilities

IBM PowerVM Hypervisor is an application from International Business Machines IBM, Inc. Providing a secure and scalable virtualized environment, these applications are built on the advanced RAS capabilities and leading performance of the Power Systems platform. An information disclosure...

HP PC security vulnerabilities

HP PC is a computer product of Hewlett-Packard HP Company, USA. A security vulnerability exists in the HP PC BIOS that originates from allowing arbitrary code execution, privilege escalation, denial of service, and information disclosure...

tgstation-server information leakage vulnerability

tgstation-server is a toolset for managing production BYOND servers. An information disclosure vulnerability exists in TGstation versions prior to 5.12.5, which originates from a username that can be discovered by forcing a login to the endpoint with an invalid password...

Rancher Labs Rancher Security Vulnerabilities

Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, Inc. in the United States. A security vulnerability exists in Rancher Labs Rancher versions 2.6.0 through 2.6.13 and 2.7.0 through 2.7.4, which stems from improper privilege management in SUSE Ranch...

SQLite code injection vulnerability

SQLite is a lightweight database that is ACID compliant relational database management system. A code injection vulnerability exists in SQLite JDBC that stems from a remote code execution vulnerability. No detailed vulnerability details are provided at this time...

WordPress Plugin: Intuitive Custom Post Order SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

Microsoft Visual Studio Code security vulnerabilities

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code. An attacker exploits the vulnerability to perform spoofing attacks...

Apache Ranger security vulnerabilities

Apache Ranger is a set of architectures from the U.S.-based Apache Foundation that implements comprehensive security measures for Hadoop clusters. The product provides centralized security policy management for core enterprise security requirements such as authorization, billing and data...

WordPress plugin Easy Digital Downloads has an authorization issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

Lightbend Alpakka Kafka security vulnerabilities

Lightbend Alpakka Kafka is a powerful connector from Lightbend USA. A security vulnerability exists in Lightbend Alpakka Kafka versions prior to 5.0.0 that stems from log files containing sensitive information...

Rails security vulnerabilities

Rails is a set of open source web application frameworks based on the Ruby language by the American Rails team. A security vulnerability exists in versions prior to Rails v6.1.7.3, which stems from insufficient cleansing of user-supplied data, that could allow a remote attacker to trick a victim...

XWiki Commons Cross-Site Scripting Vulnerabilities

XWiki Commons is a technology library shared by several other top XWiki projects. A cross-site scripting vulnerability exists in XWiki Commons, which stems from the fact that when the parameter content is set to true, the RSS macro bundled with XWiki contains the content of feed items without any...

SQL Injection Vulnerability in Online Computer and Laptop Stores

Online Computer and Laptop Store is an online computer and laptop store. An SQL injection vulnerability exists in Online Computer and Laptop Store v1.0, which originates from the function deleteorder in /classes/master.php?f=deleteorder where the parameter id of deleteorder lacks validation for...

Siemens Mendix security vulnerabilities

Siemens Mendix is a low-code application development platform from Siemens. The platform provides application development, testing, deployment and iteration. An information disclosure vulnerability exists in the Siemens Mendix Forgot Password module. The vulnerability stems from the fact that the...

WordPress plugin Stylish Cost Calculator Premium has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Medical Certificate Generator App SQL Injection Vulnerability

Medical Certificate Generator App is a simple web application for medical clinics. A SQL injection vulnerability exists in SourceCodester Medical Certificate Generator App version 1.0, which stems from a problem in the file action.php, where manipulation of the parameter id can lead to sql...

Foreman code injection vulnerability

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman that originates from allowing an administrator user to set global parameters...

Miniflux cross-site scripting vulnerabilities

Miniflux is a minimalist synopsis reader. A cross-site scripting vulnerability exists in Miniflux version v2.0.25 and later. An attacker exploits this vulnerability to force a victim to open a corrupted image, which could result in JavaScript being executed on an instance of Miniflux...

UniView IP Camera authorization issue vulnerability

Uniview IP Camera is a camera from China Uniview Technology Uniview. A security vulnerability exists in the Uniview IP Camera that stems from a failure of identification and authentication in the web-based management interface...

XWiki Platform Access Control Vulnerability

XWiki Platform is a suite of Wiki platforms for creating Web collaboration applications from the French company XWiki. An access control error vulnerability exists in XWiki Platform that originates from the possibility of exploiting the privileges of existing document content authors to execute...

Red Hat Directory Server Trust Management Vulnerability

Red Hat Directory Server is a commercial version of the Linux directory server from Red Hat. A security vulnerability exists in Red Hat Directory Server 11 and 12, which stems from an attempt by LDAP to decode the userPassword attribute instead of the userCertificate attribute when browsing for...

Moodle cross-site scripting vulnerabilities

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle, which stems from insufficient cleansing of user-supplied data in blog searches, and which ca...

WordPress plugin Metform Elementor Contact Form Builder has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

MediaTek chip input verification error vulnerability

MediaTek chips are a variety of MediaTek chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chip apusys, which is caused by a lack of boundary checking and may allow out-of-bounds reads...

TP-Link Archer C5 buffer error vulnerability

The TP-LINK Archer C5 is a wireless router from China P&L TP-LINK. The TP-Link Archer C5 suffers from a security vulnerability that stems from the latest available code it runs When receiving HTTP basic authentication, the httpd service can send a crafted packet that results in a heap overflow...

CodeIgniter data manipulation vulnerabilities

CodeIgniter is an open source web framework written in PHP. CodeIgniter is vulnerable to a data forgery issue. An attacker exploits this vulnerability to spoof its IP address...

Bienlein Cross-Site Request Forgery Vulnerability

Bienlein is a core application using FlightPHP and RedBeanHP by individual developer Stephan Hombergs. A security vulnerability exists in Bienlein, which stems from unknown handling and manipulation leading to cross-site request forgery...

WordPress plugin SMSA Shipping for WooCommerce has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...