An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1. A denial of service could occur via importing a malicious crafted XML manifest file.
AFFECTED_PRODUCTS:
GitLab Gitlab,
GitLab Gitlab,
GitLab Gitlab
The PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pdf_source' parameter in all versions up to, and including, 2.3.32 due to insufficient input sanitization and output escaping. This makes it possible for unau...
The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 1.6.43 via the hfe_template shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to view the contents of Draft,...
AFFECTED_PRODUCTS:
Brainstormforce Elementor Header \& Footer Builder
The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.4. This is due to missing or incorrect nonce validation on several functions in api/class-mvx-rest-controller.php. T...
AFFECTED_PRODUCTS:
Multivendorx Multivendorx
The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mvx_sent_deactivation_request' function in all versions up to, and including, 4.2.4. This makes it possible f...
AFFECTED_PRODUCTS:
Multivendorx Multivendorx
The HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized post publication due to a missing capability check on the activateCampaign() function in all versions up to, and including, 2.10.0. This makes it possible for authe...
The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is affected by a "..." (triple dot) path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is onl...
The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ep_booking_attendee_fields’ fields in all versions up to, and including, 4.0.4.7 due to insufficient input sanitization and output escaping. This makes it possible for un...
AFFECTED_PRODUCTS:
Metagauss Eventprime
The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ticket names in all versions up to, and including, 4.0.4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
AFFECTED_PRODUCTS:
Metagauss Eventprime
An authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged Sessions (SPS) On Premise before 7.5.1 (and LTS before 7.0.5.1) allows man-in-the-middle attackers to obtain access to privileged sessions on target resources by intercepting cleartext RDP protocol informati...
The Terms descriptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.4.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pag...
HCL Sametime is impacted by the error messages containing sensitive information. An attacker can use this information to launch another, more focused attack.
AFFECTED_PRODUCTS:
Hcltech Sametime,
Hcltech Sametime
RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php.
AFFECTED_PRODUCTS:
Rockoa Xinhu
A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SFFDISK_DEVICE_COMMAND control of the SD card reader driver allows a privileged attacker to crash the OS.
A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SCSI_PASS_THROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user.
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-2143. Reason: This candidate is a reservation duplicate of CVE-2023-2143. Notes: All CVE users should reference CVE-2023-2143 instead of this candidate. All references and descriptions in this candidate have been re...
A vulnerability, which was classified as critical, was found in PHPGurukul Medical Card Generation System 1.0. Affected is an unknown function of the file /admin/search-medicalcard.php of the component Search. The manipulation of the argument searchdata leads to sql injection. It is possible to laun...
AFFECTED_PRODUCTS:
Phpgurukul Medical Card Generation System
A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /admin/view-enquiry.php of the component View Enquiry Page. The manipulation of the argument viewid leads to sql injection. The a...
AFFECTED_PRODUCTS:
Phpgurukul Medical Card Generation System
The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning truste...
AFFECTED_PRODUCTS:
Snyk Snyk Cli
The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning trusted p...
AFFECTED_PRODUCTS:
Snyk Snyk Cli
A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/view-card-detail.php of the component Managecard View Detail Page. The manipulation of the argument viewid leads to sql injection. The attack...
AFFECTED_PRODUCTS:
Phpgurukul Medical Card Generation System
A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/edit-card-detail.php of the component Managecard Edit Card Detail Page. The manipulation of the argument editid leads to sql injection. It is possib...
AFFECTED_PRODUCTS:
Phpgurukul Medical Card Generation System
Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application.
AFFECTED_PRODUCTS:
Forescout Secureconnector
A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for the SSH server of an affected device.
This vulnerability is due to a logic error when an SSH session is establishe...
AFFECTED_PRODUCTS:
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software
... (+1)
A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition on an af...
AFFECTED_PRODUCTS:
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software
... (+172)
A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition....
AFFECTED_PRODUCTS:
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software
... (+22)
A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to deny further VPN user authentications for several mi...
AFFECTED_PRODUCTS:
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software
... (+291)
A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this v...
AFFECTED_PRODUCTS:
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software
... (+281)
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to elevate privileges on an affected device. To exploit this vulnerability, an attacker must h...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+16)
A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN service.
This vulnerability is due to reso...
AFFECTED_PRODUCTS:
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software
... (+286)
A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client.
This vulnerability is due to an integer underflow condition. An attacker could exploit t...
AFFECTED_PRODUCTS:
Cisco Anyconnect Secure Mobility Client,
Cisco Anyconnect Secure Mobility Client,
Cisco Anyconnect Secure Mobility Client
... (+35)
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
This vulnerability exists because the web-based management interface does not valid...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+4)
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
This vulnerability exists because the web-based management interface does not valid...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+4)
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
This vulnerability exists because the web-based management interface does not valid...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+88)
A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy.
This vulnerability is due to improper assignment of geolocation data. An attacker could exploit this vulne...
AFFECTED_PRODUCTS:
Cisco Firepower Threat Defense,
Cisco Firepower Threat Defense,
Cisco Firepower Threat Defense
... (+29)
A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affecte...
AFFECTED_PRODUCTS:
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software
... (+51)
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system as root.
This vulnerabilit...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+89)
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient va...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+88)
A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an affected system using static credentials.
This vulnerability is due to the presence of static accounts with hard-coded...
AFFECTED_PRODUCTS:
Cisco Firepower Threat Defense,
Cisco Firepower Threat Defense,
Cisco Firepower Threat Defense
... (+20)
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient va...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+88)
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient va...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+89)
A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly. To exploit this vulnerability, an attac...
AFFECTED_PRODUCTS:
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software
... (+282)
A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured with Snort 2 are not...
AFFECTED_PRODUCTS:
Cisco Firepower Threat Defense,
Cisco Firepower Threat Defense,
Cisco Firepower Threat Defense
... (+87)
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient vali...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+89)
A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.
This...
AFFECTED_PRODUCTS:
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software
... (+279)
A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on an affected device.
This vulnerability is due to improper authentication of password update responses. An attacker co...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+101)
A vulnerability in the web-based management interface of Cisco FMC Software could allow an authenticated, remote attacker to store malicious content for use in XSS attacks. This vulnerability is due to improper input sanitization in the web-based management interface of Cisco FMC Software. An attack...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+35)
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insuffic...
AFFECTED_PRODUCTS:
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center,
Cisco Secure Firewall Management Center
... (+88)
A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to...
AFFECTED_PRODUCTS:
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software
... (+107)
A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a browser that is accessing an affected...
AFFECTED_PRODUCTS:
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software,
Cisco Adaptive Security Appliance Software
... (+288)