libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.
AFFECTED_PRODUCTS:
Bencollins Jwt C Library
The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.
AFFECTED_PRODUCTS:
Fedorindutny Ip,
Fedorindutny Ip
Multiple Cross-Site Request Forgery (CSRF) chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user account creation and adding the user to an administrator group. This is exploited by an undisclosed function in the WSDL that...
AFFECTED_PRODUCTS:
Ncratleos Terminal Handler
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net allows Stored XSS.This issue affects BEAR – Bulk Editor and Products Manager Professional for WooComme...
AFFECTED_PRODUCTS:
Pluginus Bear Woocommerce Bulk Editor And Products Manager Professional
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Woo Plugins (by Webdados) Portugal CTT Tracking for WooCommerce allows Reflected XSS.This issue affects Portugal CTT Tracking for WooCommerce: from n/a through 2.1.
AFFECTED_PRODUCTS:
Webdados Portugal Ctt Tracking For Woocommerce
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magic Hills Pty Ltd Wonder Slider Lite allows Reflected XSS.This issue affects Wonder Slider Lite: from n/a through 13.9.
AFFECTED_PRODUCTS:
Wonderplugin Wonder Slider Lite
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Themes Blocksy allows Stored XSS.This issue affects Blocksy: from n/a through 2.0.19.
AFFECTED_PRODUCTS:
Creativethemes Blocksy
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Audrasjb GDPR Data Request Form allows Stored XSS.This issue affects GDPR Data Request Form: from n/a through 1.6.
AFFECTED_PRODUCTS:
Whodunit Gdpr Data Request Form
xxl-job =< 2.4.1 has a Server-Side Request Forgery (SSRF) vulnerability, which causes low-privileged users to control executor to RCE.
AFFECTED_PRODUCTS:
Xuxueli Xxl Job
A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same time with a fail in the mas_prev_slot function. This issue could allow a local user to crash the system.
AFFECTED_PRODUCTS:
Linux Linux Kernel,
Linux Linux Kernel,
Fedoraproject Fedora
Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 7.3.1.
AFFECTED_PRODUCTS:
Snowsoftware Snow Inventory Agent
Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0; Invento...
AFFECTED_PRODUCTS:
Snowsoftware Snow Inventory Agent,
Snowsoftware Snow Inventory Agent,
Snowsoftware Snow Inventory Agent
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The vi...
AFFECTED_PRODUCTS:
PostgreSQL Postgresql,
PostgreSQL Postgresql,
PostgreSQL Postgresql
... (+1)
Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5. Customers advised to upgrade to version 7.0
AFFECTED_PRODUCTS:
Snowsoftware Snow Inventory Agent
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lê Văn Toản Woocommerce Vietnam Checkout allows Stored XSS.This issue affects Woocommerce Vietnam Checkout: from n/a through 2.0.7.
AFFECTED_PRODUCTS:
Levantoan Woocommerce Vietnam Checkout
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc allows Reflected XSS.This issue affects WP SMS – Messaging & SMS Notification for WordPress, WooCommerc...
AFFECTED_PRODUCTS:
Veronalabs Wp Sms
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apollo13Themes Apollo13 Framework Extensions allows Stored XSS.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.2.
AFFECTED_PRODUCTS:
Apollo13Themes Apollo13 Framework Extensions
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13.
AFFECTED_PRODUCTS:
Ylefebvre Link Library
An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In projects using subgroups to define who can push and/or merge to protected branches, there may have been instances in which subgroup members with the Developer role were able to push or me...
AFFECTED_PRODUCTS:
GitLab Gitlab,
GitLab Gitlab,
GitLab Gitlab
Exposure of Data Element to Wrong Session vulnerability in Mia Technology Inc. MÄ°A-MED allows Read Sensitive Strings Within an Executable.This issue affects MÄ°A-MED: before 1.0.7.
AFFECTED_PRODUCTS:
Miateknoloji Mia Med
Plaintext Storage of a Password vulnerability in Mia Technology Inc. MÄ°A-MED allows Read Sensitive Strings Within an Executable.This issue affects MÄ°A-MED: before 1.0.7.
AFFECTED_PRODUCTS:
Miateknoloji Mia Med
Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc. MÄ°A-MED allows Collect Data as Provided by Users.This issue affects MÄ°A-MED: before 1.0.7.
AFFECTED_PRODUCTS:
Miateknoloji Mia Med
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acowebs Product Labels For Woocommerce (Sale Badges) allows Stored XSS.This issue affects Product Labels For Woocommerce (Sale Badges): from n/a through 1.5.3.
AFFECTED_PRODUCTS:
Acowebs Product Labels For Woocommerce \(sale Badges\)
Dell EMC AppSync, versions from 4.2.0.0 to 4.6.0.0 including all Service Pack releases, contain an exposure of sensitive information vulnerability in AppSync server logs. A high privileged remote attacker could potentially exploit this vulnerability, leading to the disclosure of certain user creden...
AFFECTED_PRODUCTS:
Dell Emc Appsync
Authorization Bypass Through User-Controlled Key vulnerability in Mia Technology Inc. MÄ°A-MED allows Authentication Abuse.This issue affects MÄ°A-MED: before 1.0.7.
AFFECTED_PRODUCTS:
Miateknoloji Mia Med
Setor Informatica S.I.L version 3.0 is vulnerable to Open Redirect via the hprinter parameter, allows remote attackers to execute arbitrary code.
AFFECTED_PRODUCTS:
Setorinformatica S.i.l
Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.5~1.7.0 on all platforms allows attacker to smuggle request.
Vulnerability Cause Description：
The http_parser does not comply with the RFC-7230 HTTP 1.1 specification.
Attack scenario:
If a message is received with both a Transfer...
AFFECTED_PRODUCTS:
Apache Brpc
The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendar_request_params[dates_ddmmyy_csv]' parameter in all versions up to, and including, 9.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...
AFFECTED_PRODUCTS:
Wpbookingcalendar Booking Calendar
The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's page restriction and view page content.
AFFECTED_PRODUCTS:
Pluginsandsnippets Simple Page Access Restriction
Zentao v18.0 to v18.10 was discovered to contain a remote code execution (RCE) vulnerability via the checkConnection method of /app/zentao/module/repo/model.php.
AFFECTED_PRODUCTS:
Easycorp Zentao
Yealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection vulnerability via the file upload interface.
AFFECTED_PRODUCTS:
Yealink Yealink Meeting Server
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87. This is due to missing or incorrect nonce validation on the wpr_update_form_action_meta function. This makes it possible for unauthenticated attacke...
AFFECTED_PRODUCTS:
Royal-Elementor-Addons Royal Elementor Addons
An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file.
AFFECTED_PRODUCTS:
Easycorp Zentao,
Easycorp Zentao Biz,
Easycorp Zentao Max
In Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions the `doAsUserId` URL parameter may get leaked when creating linked content using the WYSIWYG editor and while impersonating a user....
AFFECTED_PRODUCTS:
Liferay Liferay Portal,
Liferay Digital Experience Platform,
Liferay Dxp
Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 18, and older unsupported versions returns with different responses depending on whether a site does not exist or if the user does not have permission to access the site...
AFFECTED_PRODUCTS:
Liferay Liferay Portal,
Liferay Digital Experience Platform,
Liferay Dxp
The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 6, 7.2 before fix pack 19, and older unsupported versions does not check the URL of the IFrame, which allows remote authenticated users to cause a denia...
AFFECTED_PRODUCTS:
Liferay Liferay Portal,
Liferay Digital Experience Platform,
Liferay Dxp
... (+1)
The Payment Forms for Paystack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated at...
AFFECTED_PRODUCTS:
Paystack Payment Forms For Paystack
Account lockout in Liferay Portal 7.2.0 through 7.3.0, and older unsupported versions, and Liferay DXP 7.2 before fix pack 5, and older unsupported versions does not invalidate existing user sessions, which allows remote authenticated users to remain authenticated after an account has been locked.
AFFECTED_PRODUCTS:
Liferay Liferay Portal,
Liferay Digital Experience Platform,
Liferay Digital Experience Platform
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to perform SQL injection via /novel/userFeedback/list.
AFFECTED_PRODUCTS:
Xxyopen Novel Plus,
Xxyopen Novel Plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /common/dict/list
AFFECTED_PRODUCTS:
Xxyopen Novel Plus,
Xxyopen Novel Plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /novel/author/list
AFFECTED_PRODUCTS:
Xxyopen Novel Plus,
Xxyopen Novel Plus
jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutMaterialCount() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's p...
AFFECTED_PRODUCTS:
Jishenghua Jsherp
An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication.Â
This issue affects only firmware version SonicOS 7.1.1-7040.
AFFECTED_PRODUCTS:
SonicWall SonicOS
File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component.
AFFECTED_PRODUCTS:
Softwarepublico E Sic Livre
An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions at com.java2nb.system.controller.SysUserController: uploadImg(). An attacker can pass in specially crafted filename parameter to perform arbitrary File download.
AFFECTED_PRODUCTS:
Xxyopen Novel Plus,
Xxyopen Novel Plus
An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb.common.controller.FileController: upload(). An attacker can pass in specially crafted filename parameter to perform arbitrary File download.
AFFECTED_PRODUCTS:
Xxyopen Novel Plus,
Xxyopen Novel Plus
An arbitrary File download vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb.common.controller.FileController: fileDownload(). An attacker can pass in specially crafted filePath and fieName parameters to perform arbitrary File download.
AFFECTED_PRODUCTS:
Xxyopen Novel Plus,
Xxyopen Novel Plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to perform SQL injection via /novel/bookContent/list.
AFFECTED_PRODUCTS:
Xxyopen Novel Plus,
Xxyopen Novel Plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL injection via /system/dataPerm/list
AFFECTED_PRODUCTS:
Xxyopen Novel Plus,
Xxyopen Novel Plus
Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter.
AFFECTED_PRODUCTS:
Axigen Axigen Mail Server