The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the ladiflow_save_hook() function in versions up to, and including, 4.4. This makes it possible for unauthenticated attackers to update the 'ladiflow_hook_configs' option via a forged request...
AFFECTED_PRODUCTS:
Ladipage Ladipage
The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_config() function in versions up to, and including, 4.4. This makes it possible for authenticated attackers with subscriber-level access and above to update the 'ladipage...
AFFECTED_PRODUCTS:
Ladipage Ladipage
The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ladiflow_save_hook() function in versions up to, and including, 4.3. This makes it possible for authenticated attackers with subscriber-level access and above to update the 'l...
AFFECTED_PRODUCTS:
Ladipage Ladipage
Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol uses plaintext to transfer data, allowing an attacker to intercept traffic and retrieve credentials.
Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier, Ver.2.10.x series Ver.2.10.51 and earlier, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a user w...
AFFECTED_PRODUCTS:
Appleple A Blog Cms,
Appleple A Blog Cms,
Appleple A Blog Cms
... (+1)
An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file is affected.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or perform an DoS due to improper input validation.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only.
AFFECTED_PRODUCTS:
Phoenixcontact Charx Sec 3000 Firmware,
Phoenixcontact Charx Sec 3050 Firmware,
Phoenixcontact Charx Sec 3100 Firmware
... (+1)
The Newsletter2Go plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ parameter in all versions up to, and including, 4.0.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber access and above,...
AFFECTED_PRODUCTS:
Newsletter2Go Newsletter2go
The f(x) Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.1 via the API. This makes it possible for unauthenticated attackers to obtain page and post contents of a site protected with this plugin.
AFFECTED_PRODUCTS:
Shellcreeper F\(x\) Private Site
Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series. An arbitrary file in the affected product may be accessed or arbitrary code may be executed by processing a specially crafted request sent from a remote attacker with an admini...
SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to the txtemail parameter in the login.php.
AFFECTED_PRODUCTS:
Walterjnr1 Employee Management System
Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client...
AFFECTED_PRODUCTS:
Skygroup Skysea Client View
Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is in...
AFFECTED_PRODUCTS:
Skygroup Skysea Client View
Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a specially crafted URL and perform a specific operation, an arbitrary script may be executed on the web browser of the user.
AFFECTED_PRODUCTS:
Pleasanter Pleasanter
Reflected cross-site scripting (XSS) vulnerability in Racktables v0.22.0 and before, allows local attackers to execute arbitrary code and obtain sensitive information via the search component in index.php.
AFFECTED_PRODUCTS:
Racktables Project Racktables
DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability elevated from HNAP Stack-Based Buffer Overflow.
HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted payload to the english.php component.
Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local users to gain sensitive information.This issue affects Cosminexus Component Container: from 11-30 before 11-30-05, from 11-20 before 11-20-07, from 11-10 before 11-10-10, from 11-00...
Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration (PI) - versions 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.
AFFECTED_PRODUCTS:
SAP Netweaver Process Integration
Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. A successful attack can allow a malicious attacker to access and modify data through their ability to execu...
AFFECTED_PRODUCTS:
SAP Netweaver As Abap,
SAP Netweaver As Abap
Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner.
AFFECTED_PRODUCTS:
SAP Abap Platform,
SAP Abap Platform
Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the application and with no impact on Integrity and Availability of the application.
AFFECTED_PRODUCTS:
SAP Netweaver Enterprise Portal
Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.
AFFECTED_PRODUCTS:
SAP NetWeaver
SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave request information. This could lead to creation of request with incorrect approver causing low impact on Confidentiality and Integrity with no impact on Availability of the applic...
AFFECTED_PRODUCTS:
SAP Fiori Front End Server
SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on confident...
AFFECTED_PRODUCTS:
SAP Netweaver Application Server Java
NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also write access using HTTP...
AFFECTED_PRODUCTS:
Nextchat Nextchat
phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. This was due to improper case-sensitivity in the code that was meant to prevent these attacks. If you r...
AFFECTED_PRODUCTS:
Phlex Phlex,
Phlex Phlex,
Phlex Phlex
... (+4)
codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesn't check the sender when receiving an external message. This allows an attacker to host a website that will steal the user's Codeium api-key, and thus impersona...
AFFECTED_PRODUCTS:
Codeium Codeium
Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by Postal addressed from a s...
AFFECTED_PRODUCTS:
Postalserver Postal
Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another program running on the host (or another fixed-output derivation) via Unix domain sockets in the abstract namespace. This allows to modify the...
AFFECTED_PRODUCTS:
Nixos Nix,
Nixos Nix,
Nixos Nix
... (+1)
Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket.
AFFECTED_PRODUCTS:
Munyweki Insurance Management System
Collabora Online is a collaborative online office suite based on LibreOffice technology. Each document in Collabora Online is opened by a separate "Kit" instance in a different "jail" with a unique directory "jailID" name. For security reasons, this directory name is randomly generated and should no...
AFFECTED_PRODUCTS:
Collabora Online,
Collabora Online,
Collabora Online
The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportRegistrations function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subscriber access or higher, to export paymen...
AFFECTED_PRODUCTS:
Wobbie Mollie Forms
The Mollie Forms plugin for WordPress is vulnerable to unauthorized post or page duplication due to a missing capability check on the duplicateForm function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subscriber access or higher, to duplicate...
AFFECTED_PRODUCTS:
Wobbie Mollie Forms
GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path.
AFFECTED_PRODUCTS:
Geovision Gv Asmanager
The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection cannot find a matching configured secret. When such a connection is automatically added on startup...
OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. By manually manipulating http requests when using the draw.io integration it is possible to read arbitrary files as the configured system user and SSRF. The problem is fixed in version 18.1...
AFFECTED_PRODUCTS:
Frentix Openolat
Zitadel is an open source identity management system. Zitadel uses a cookie to identify the user agent (browser) and its user sessions. Although the cookie was handled according to best practices, it was accessible on subdomains of the ZITADEL instance. An attacker could take advantage of this and...
AFFECTED_PRODUCTS:
Zitadel Zitadel,
Zitadel Zitadel,
Zitadel Zitadel
SOY CMS is an open source CMS (content management system) that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrator. The vulnerability enables the executio...
AFFECTED_PRODUCTS:
Saitodev Soy Cms