26 January 2024

54 results · Clear filters · Feed

• High 7.7
  CVE-2024-23506

  WordPress InstaWP Connect plugin <= 0.1.0.9 - Sensitive Data Exposure vulnerability

  Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.9.

  InstaWP InstaWP Connect
  Jan 26, 2024
• High 7.6
  CVE-2024-22147

  WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.7.5 is vulnerable to SQL Injection

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce.This issue affects PDF Invoices & Packing Slips for WooCommerce: from n/a through 3.7.5.

  WP Overnight PDF Invoices & Packing Slips for WooCommerce Web / CMS
  Jan 26, 2024
• High 8.5
  CVE-2024-22283

  WordPress Delhivery Logistics Courier Plugin <= 1.0.107 is vulnerable to SQL Injection

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delhivery Delhivery Logistics Courier.This issue affects Delhivery Logistics Courier: from n/a through 1.0.107.

  Delhivery Delhivery Logistics Courier
  Jan 26, 2024
• High 7.3
  CVE-2024-0946

  60IndexPage Parameter index.php server-side request forgery

  A vulnerability classified as critical was found in 60IndexPage up to 1.8.5. This vulnerability affects unknown code of the file /apply/index.php of the component Parameter Handler. The manipulation of the argument url leads to server-side request forgery. Th…

  Jan 26, 2024
• High 7.3
  CVE-2024-0945

  60IndexPage Parameter file.php server-side request forgery

  A vulnerability classified as critical has been found in 60IndexPage up to 1.8.5. This affects an unknown part of the file /include/file.php of the component Parameter Handler. The manipulation of the argument url leads to server-side request forgery. It is p…

  Jan 26, 2024
• High 7.6
  CVE-2024-21985

  Privilege Escalation Vulnerability in ONTAP 9

  ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond their intende…

  NETAPP ONTAP 9
  Jan 26, 2024
• High 7.1
  CVE-2023-6291

  Keycloak: redirect_uri validation bypass

  A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other user…

  Red Hat Red Hat Single Sign-On 7 Red Hat Data Grid 8 Red Hat Fuse 7 Maven
  Jan 26, 2024
• High 8.2
  CVE-2024-23896

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stock.php, in the batchno parameter. Exp…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23894

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancecreate.php, in the issuance…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23893

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentermodify.php, in the costcenteri…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23892

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentercreate.php, in the costcenteri…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23891

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemcreate.php, in the itemid parameter.…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23890

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itempopup.php, in the description parame…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23889

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemgroupcreate.php, in the itemgroupid …

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23888

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stocktransactionslist.php, in the itemid…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23887

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grncreate.php, in the grndate parameter.…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23886

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemmodify.php, in the bincardinfo param…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23885

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrymodify.php, in the countryid para…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23884

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnmodify.php, in the grndate parameter.…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23883

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructuremodify.php, in the descripti…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23882

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxcodecreate.php, in the taxcodeid para…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23881

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statelist.php, in the description parame…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23880

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxcodelist.php, in the description para…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23879

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statemodify.php, in the description para…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23878

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnprint.php, in the grnno parameter. Ex…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23877

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/currencycreate.php, in the currencyid pa…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23876

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructurecreate.php, in the descripti…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23875

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancedisplay.php, in the issuanc…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23874

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/companymodify.php, in the address1 param…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23873

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/currencymodify.php, in the currencyid pa…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23872

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/locationmodify.php, in the description p…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23871

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/unitofmeasurementmodify.php, in the desc…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23870

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancelist.php, in the delete par…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23869

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuanceprint.php, in the issuancen…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23868

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnlist.php, in the deleted parameter. E…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23867

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statecreate.php, in the stateid paramete…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23866

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrycreate.php, in the countryid para…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23865

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructurelist.php, in the description…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23864

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrylist.php, in the description para…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024
• High 8.2
  CVE-2024-23863

  Cross-Site Scripting (XSS) vulnerability in Cups Easy

  A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructuredisplay.php, in the descript…

  Cups Easy Cups Easy (Purchase & Inventory)
  Jan 26, 2024