A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.
AFFECTED_PRODUCTS:
Phpjabbers Availability Booking Calendar
Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export.
AFFECTED_PRODUCTS:
Phpjabbers Shuttle Booking Software
Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
AFFECTED_PRODUCTS:
Phpjabbers Time Slots Booking Calendar
Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
AFFECTED_PRODUCTS:
Phpjabbers Time Slots Booking Calendar
Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.
AFFECTED_PRODUCTS:
Phpjabbers Time Slots Booking Calendar
Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
AFFECTED_PRODUCTS:
Phpjabbers Availability Booking Calendar
BoidCMS 2.0.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the title, subtitle, footer, or keywords parameter in a page=create action.
AFFECTED_PRODUCTS:
Boidcms Boidcms
A Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an unauthenticated attacker to inject a payload via the email parameter during login.
AFFECTED_PRODUCTS:
Mayurik Courier Management System
A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name parameter to index.php.
AFFECTED_PRODUCTS:
Phpjabbers Availability Booking Calendar
Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
AFFECTED_PRODUCTS:
Phpjabbers Availability Booking Calendar
A Cross Site Scripting (XSS) vulnerability in GaatiTrack Courier Management System 1.0 allows a remote attacker to inject JavaScript via the page parameter to login.php or header.php.
AFFECTED_PRODUCTS:
Mayurik Courier Management System
Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated with password reset emails.
AFFECTED_PRODUCTS:
Jorani Leave Management System
An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
AFFECTED_PRODUCTS:
Linecorp Line
An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
AFFECTED_PRODUCTS:
Linecorp Line
An issue in sanTas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
AFFECTED_PRODUCTS:
Linecorp Line
An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
AFFECTED_PRODUCTS:
Linecorp Line
An issue in urban_project mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
AFFECTED_PRODUCTS:
Linecorp Line
An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
AFFECTED_PRODUCTS:
Linecorp Line
An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
AFFECTED_PRODUCTS:
Linecorp Line
A Cross Site Scripting (XSS) vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, description, title, or address parameter to index.php.
AFFECTED_PRODUCTS:
Phpjabbers Shuttle Booking Software
Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor.
AFFECTED_PRODUCTS:
Maximawatches Maxima Max Pro Power Firmware
Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomplete blacklist in the SVG inspection, allowing JavaScript in the SRC attribute of an IFRAME element. An authenticated attack with assets.create permission is required for exploitat...
AFFECTED_PRODUCTS:
Squidex.io Squidex
An issue was discovered in server.js in etcd-browser 87ae63d75260. By supplying a /../../../ Directory Traversal input to the URL's GET request while connecting to the remote server port specified during setup, an attacker can retrieve local operating system files from the remote system.
An XSS issue was discovered in a web endpoint in Zimbra Collaboration (ZCS) before 10.0.4 via an unsanitized parameter. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.
AFFECTED_PRODUCTS:
Zimbra Collaboration,
Zimbra Collaboration,
Zimbra Collaboration
... (+1)
An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox of an authenticated user. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.
AFFECTED_PRODUCTS:
Zimbra Collaboration,
Zimbra Collaboration,
Zimbra Collaboration
... (+1)
A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the use...
AFFECTED_PRODUCTS:
Lfprojects Mlflow
strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message.
AFFECTED_PRODUCTS:
Strongswan Strongswan
An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.3. An attacker can gain access to a Zimbra account. This is also fixed in 9.0.0 Patch 35 and 8.8.15 Patch 42.
AFFECTED_PRODUCTS:
Zimbra Collaboration,
Zimbra Collaboration,
Zimbra Collaboration
... (+1)
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user after visiting the vulnerable URL which leads to executing malicious script code. This may let the attacker steal cookie-ba...
AFFECTED_PRODUCTS:
Hcltech Connections,
Hcltech Connections,
Hcltech Connections
... (+1)
A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address during...
AFFECTED_PRODUCTS:
Insyde Insydeh2o,
Insyde Insydeh2o,
Insyde Insydeh2o
... (+2)
The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter in versions 1.4.0 to 1.4.6.1 (free) and versions 1.4.0 to 1.5.0 (pro) due to insufficient escaping on the user supplied parameter and lack of sufficient prepara...
AFFECTED_PRODUCTS:
Burst-Statistics Burst Statistics,
Burst-Statistics Burst Statistics
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_db_specs() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level acce...
AFFECTED_PRODUCTS:
Bowo System Dashboard
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_option_value() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level...
AFFECTED_PRODUCTS:
Bowo System Dashboard
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_global_value() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level...
AFFECTED_PRODUCTS:
Bowo System Dashboard
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_php_info() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level acce...
AFFECTED_PRODUCTS:
Bowo System Dashboard
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_constants() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authenticated attackers, with subscriber-level acc...
AFFECTED_PRODUCTS:
Bowo System Dashboard
This flaw allows a malicious HTTP server to set "super cookies" in curl that
are then passed back to more origins than what is otherwise allowed or
possible. This allows a site to set cookies that then would get sent to
different and unrelated sites and domains.
It could do this by exploiting a mix...
AFFECTED_PRODUCTS:
Fedoraproject Fedora,
Haxx Curl
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.
AFFECTED_PRODUCTS:
Microweber Microweber
In the module "Orders (CSV, Excel) Export PRO" (ordersexport) < 5.2.0 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can access exports from the module which can lead to a leak of personal information...
AFFECTED_PRODUCTS:
Myprestamodules Orders \(csv\, Excel\) Export Pro
In the module "Product Tag Icons Pro" (ticons) before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon() has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
AFFECTED_PRODUCTS:
Mypresta Product Tag Icons Pro
Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the `/Videos/<itemId>/stream` and `/Videos/<itemId>/stream.<container>` endpoints which are present in the current Jellyfin version. Ad...
AFFECTED_PRODUCTS:
Jellyfin Jellyfin
An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php file.
AFFECTED_PRODUCTS:
Netgate Pfsense,
Netgate Pfsense Plus
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
AFFECTED_PRODUCTS:
Artifex Ghostscript
A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contains s...
Using go get to fetch a module with the ".git" suffix may unexpectedly fallback to the insecure "git://" protocol if the module is unavailable via the secure "https://" and "git+ssh://" protocols, even if GOINSECURE is not set for said module. This only affects users who are not using the module pro...
AFFECTED_PRODUCTS:
Golang Go,
Golang Go
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of data (up to about 1Gi...
AFFECTED_PRODUCTS:
Golang Go,
Golang Go
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.Â
AFFECTED_PRODUCTS:
Ami Aptio V
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.Â
AFFECTED_PRODUCTS:
Ami Aptio V
The login REST API in ProLion CryptoSpike 3.0.15P2 (when LDAP or Active Directory is used as the users store) allows a remote blocked user to login and obtain an authentication token by specifying a username with different uppercase/lowercase character combination.
AFFECTED_PRODUCTS:
Prolion Cryptospike
TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code.
AFFECTED_PRODUCTS:
Totolink A3002ru Firmware