Archive
29 December 2023
Vulnerabilities first published on this day (UTC), newest first.
20 results · Clear filters · Feed
-
Low 2.4
Novel-Plus Friendly Link FriendLinkController.java cross site scripting
A vulnerability was found in Novel-Plus up to 4.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file novel-admin/src/main/java/com/java2nb/novel/controller/FriendLinkController.java of the component …
-
Low 3.7
Mattermost Cross-site Scripting vulnerability
Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client.
-
Low 3.7
XSS Vulnerability Messages
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Through an HTML payload (iframe tag) it is possible to carry out XSS attacks when the user receiving th…
-
Low 3.0
User notification settings edition
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Allows you to edit the Web Console user notification options. This issue affects Pandora FMS: from 700 …
-
Low 3.7
WordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open Redirection
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SolidWP Solid Security – Password, Two Factor Authentication, and Brute Force Protection.This issue affects Solid Security – Password, Two Factor Authentication, and Brute Force Protection: …
-
Low 2.7
Poly CCX 400/CCX 600/Trio 8800/Trio C60 Web Interface protection mechanism
A vulnerability has been found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation leads to protection mechanism failure. T…
-
Low 2.7
Poly VVX 601 Configuration File Import unverified password change
A vulnerability, which was classified as problematic, was found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, ED…
-
Low 3.7
Poly VVX 601 Web Configuration Application random values
A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550…
-
Low 3.5
Novel-Plus HTTP POST Request updateUserInfo cross site scripting
A vulnerability classified as problematic has been found in Novel-Plus up to 4.2.0. This affects an unknown part of the file /user/updateUserInfo of the component HTTP POST Request Handler. The manipulation of the argument nickName leads to cross site scripti…
-
Low 3.1
WordPress Advanced Custom Fields: Image Crop Add-on Plugin <= 1.4.12 is vulnerable to Broken Access Control
Missing Authorization vulnerability in Anders Thorborg.This issue affects Anders Thorborg: from n/a through 1.4.12.
-
Low 2.4
SourceCodester Engineers Online Portal Add Engineer cross site scripting
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add Engineer Handler. The manipulation of the argument first name/last name with t…
-
Low 2.9
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause i…
-
Low 3.2
Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information l…
-
Low 3.5
code-projects QR Code Generator cross site scripting
A vulnerability was found in code-projects QR Code Generator 1.0. It has been classified as problematic. This affects an unknown part of the file /download.php?file=author.png. The manipulation of the argument file with the input "><iMg src=N onerror=alert(do…
-
Low 3.3
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause d…
-
Low 3.3
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause d…
-
Low 3.3
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information…
-
Low 3.3
Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information…
-
Low 2.4
code-projects Client Details System regester.php cross site scripting
A vulnerability was found in code-projects Client Details System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/regester.php. The manipulation of the argument fname/lname/email/contact leads to c…
-
Low 3.3
Winter CMS Local File Inclusion through Server Side Template Injection
Winter is a free, open-source content management system. Users with access to backend forms that include a ColorPicker FormWidget can provide a value that would then be included without further processing in the compilation of custom stylesheets via LESS. Thi…