All CVEs — page 367 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Paytm Payment Gateway WordPress plugin contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands on the database. This occurs when payment callbacks are processed without proper data escaping, and can be exploited when the gateway is enabled without credentials.
The Paytm Payment Gateway plugin fails to sanitize data from payment callbacks, allowing stored XSS in admin panels. When the gateway is misconfigured without credentials, any user can inject malicious scripts that execute in the administrator's browser session.
The Comelit Multi-User Gateway exposes an unauthenticated management interface that allows remote attackers to read sensitive configuration data including the Remote Configuration Password in cleartext. This authentication bypass flaw enables unauthorized access to device configuration without any credentials.
The Comelit Multi-User Gateway for VIP System allows an authenticated user to change the installer/administrator password, leading to potential unauthorized access.
The flaw allows unauthenticated users to delete arbitrary files and directories by manipulating a URL in the Cache Enabler WordPress plugin, posing a significant security risk.
The flaw allows unauthenticated attackers to create and download full site backups, including sensitive data, and delete arbitrary files, leading to potential data disclosure and site takeover.
The flaw in the FIFU WordPress plugins allows attackers to perform any REST API action via a CSRF attack, due to improper nonce enforcement.
The flaw allows unauthenticated attackers to execute arbitrary shortcodes, leading to potential remote code execution.
The vulnerability in Hitachi Coding Software Suite allows attackers to gain unauthorized access by exploiting hidden accounts or hardcoded credentials, potentially leading to full system compromise.
The flaw is an Incorrect Authorization vulnerability in Hitachi Coding Software Suite that allows unprivileged users to perform administrator-level operations, posing a significant security risk.
The flaw involves hard-coded JWT signing keys in Hitachi Coding Software Suite, allowing attackers to generate unauthorized tokens and exploit administrative functions.
The Hitachi Coding Software Suite transmits sensitive information in cleartext over the network, making it vulnerable to eavesdropping attacks that can capture authentication credentials and other sensitive data. This vulnerability allows attackers to intercept and read confidential information during transit without requiring any special privileges or user interaction.
The vulnerability in Hitachi Coding Software Suite allows unauthenticated attackers to invoke critical APIs, potentially leading to unauthorized access to sensitive information.
The flaw is a Path Traversal vulnerability in Hitachi Coding Software Suite, allowing attackers to access, create, modify, or delete files. This matters because it can lead to unauthorized access and manipulation of sensitive files, compromising system integrity and data security.