‼ CVE-2023-38427 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-38432 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-38434 ‼
📖 Read
via "National Vulnerability Database".
xHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3708 ‼
📖 Read
via "National Vulnerability Database".
Several themes for WordPress by DeoThemes are vulnerable to Reflected Cross-Site Scripting via breadcrumbs in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-38429 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3459 ‼
📖 Read
via "National Vulnerability Database".
The Export and Import Users and Customers plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'hf_update_customer' function called via an AJAX action in versions up to, and including, 2.4.1. This makes it possible for authenticated attackers, with shop manager-level permissions to change user passwords and potentially take over administrator accounts.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36695 ‼
📖 Read
via "National Vulnerability Database".
Incorrect Default Permissions vulnerability in Hitachi Device Manager on Linux (Device Manager Server component), Hitachi Tiered Storage Manager on Linux, Hitachi Replication Manager on Linux, Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, Hitachi Tuning Manager - Agent for NAS components), Hitachi Compute Systems Manager on Linux allows File Manipulation.This issue affects Hitachi Device Manager: before 8.8.5-02; Hitachi Tiered Storage Manager: before 8.8.5-02; Hitachi Replication Manager: before 8.8.5-02; Hitachi Tuning Manager: before 8.8.5-02; Hitachi Compute Systems Manager: before 8.8.3-08.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31998 ‼
📖 Read
via "National Vulnerability Database".
A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices.📖 Read
via "National Vulnerability Database".
📢 Warning issued over “incomplete” fix for Adobe ColdFusion vulnerability 📢
📖 Read
via "ITPro".
An incomplete fix for a vulnerability disclosure could be placing users at risk, researchers warned 📖 Read
via "ITPro".
ITPro
Warning issued over “incomplete” fix for Adobe ColdFusion vulnerability
An incomplete fix for a vulnerability disclosure could be placing users at risk, researchers warned
‼ CVE-2022-46857 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in SiteAlert plugin <=Â 1.9.7 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25482 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Mike Martel WP Tiles plugin <=Â 1.1.2 versions.📖 Read
via "National Vulnerability Database".
❤1
‼ CVE-2023-3743 ‼
📖 Read
via "National Vulnerability Database".
Ap Page Builder, in versions lower than 1.7.8.2, could allow a remote attacker to send a specially crafted SQL query to the product_one_img parameter to retrieve the information stored in the database.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37973 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in David Pokorny Replace Word plugin <=Â 2.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2018-25088 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as critical, was found in Blue Yonder postgraas_server up to 2.0.0b2. Affected is the function _create_pg_connection/create_postgres_db of the file postgraas_server/backends/postgres_cluster/postgres_cluster_driver.py of the component PostgreSQL Backend Handler. The manipulation leads to sql injection. Upgrading to version 2.0.0 is able to address this issue. The patch is identified as 7cd8d016edc74a78af0d81c948bfafbcc93c937c. It is recommended to upgrade the affected component. VDB-234246 is the identifier assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23660 ‼
📖 Read
via "National Vulnerability Database".
Auth. (subscriber+) SQL Injection (SQLi) vulnerability in MainWP MainWP Maintenance Extension plugin <=Â 4.1.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25473 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Miro Mannino Flickr Justified Gallery plugin <=Â 3.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37386 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Media Library Helper plugin <=Â 1.2.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-38326 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37387 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme Classified Listing plugin <=Â 2.4.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25475 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Vladimir Prelovac Smart YouTube PRO plugin <=Â 4.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37892 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Kemal YAZICI - PluginPress Shortcode IMDB plugin <=Â 6.0.8 versions.📖 Read
via "National Vulnerability Database".