8 November 2023

46 results · Clear filters · Feed

• Medium 6.5
  CVE-2023-46613

  WordPress Add to Calendar Button Plugin < 1.5.1 is vulnerable to Cross Site Scripting (XSS)

  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jens Kuerschner Add to Calendar Button plugin <= 1.5.1 versions.

  Jens Kuerschner Add to Calendar Button
  Nov 8, 2023
• Medium 5.3
  CVE-2023-46755

  Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerabili…

  Huawei HarmonyOS EMUI Network devices
  Nov 8, 2023
• Medium 6.5
  CVE-2023-4061

  Wildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor

  A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitiv…

  Red Hat Red Hat JBoss Enterprise Application Platform 8 Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Maven
  Nov 8, 2023
• Medium 5.4
  CVE-2023-46483

  Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a craf…

  Nov 8, 2023
• Medium 6.5
  CVE-2023-45857 Public exploit

  Axios Cross-Site Request Forgery Vulnerability

  An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

  node-axios node-axios axios Debian Ubuntu npm
  Nov 8, 2023
• Medium 5.4
  CVE-2023-47379

  Microweber Cross-site Scripting vulnerability

  Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.

  microweber/microweber Packagist
  Nov 8, 2023