Remote Code Execution

An attacker can easily access sensitive login credentials because they are stored in plain text within the HTML code of the TSplus Remote Access login page. This vulnerability can be exploited simply by viewing the page's source code, making it critical for anyone using this software to take immediate action to secure their systems.

An attacker can change the plugin settings without needing to log in, which could lead to malicious changes or even inject harmful scripts that affect users. This vulnerability affects versions up to 2.3.1 of the Flexible Checkout Fields for WooCommerce plugin and arises from a lack of proper checks and safeguards when updating settings.

An attacker can exploit this vulnerability to cause a denial of service (DoS) by sending specially crafted XML data that makes the parser hang indefinitely. This can happen if the parser is processing entity names that contain special characters, so users should upgrade to the latest version or disable certain features to protect themselves.

An attacker can gain unauthorized access to sensitive resources in Apache Superset if the default SECRET_KEY hasn't been changed, allowing them to manipulate session cookies. This vulnerability only affects installations that haven't followed the setup instructions to configure a unique SECRET_KEY.

This vulnerability allows an attacker to inject malicious scripts into the website, which could lead to unauthorized actions or data theft from users who visit the affected page. It can be exploited remotely by manipulating a specific input field without needing any special access or credentials.

This vulnerability allows an attacker to run malicious code on a victim's computer when they open a specially crafted AutoCAD file in SAP 3D Visual Enterprise Author. The attacker needs the victim to open this manipulated file, which can come from untrusted sources, to exploit the flaw.

This vulnerability allows an attacker to execute malicious code on a victim's system by tricking them into opening a specially crafted 3D object file in SAP 3D Visual Enterprise Author. It requires the victim to open a file from an untrusted source, which can lead to serious security breaches.

This vulnerability allows an attacker to run malicious code on a victim's computer if they open a specially crafted SolidWorks Drawing file in SAP 3D Visual Enterprise Author version 9. The attacker needs the victim to open this manipulated file, which could come from untrusted sources, to exploit the flaw.

This vulnerability allows an attacker to run malicious code on a victim's computer by tricking them into opening a specially crafted graphics file in SAP 3D Visual Enterprise Author. It requires the victim to open a file from an untrusted source, which can lead to serious security breaches.

An attacker can execute malicious code on a victim's system by tricking them into opening a specially crafted SolidWorks Part file in SAP 3D Visual Enterprise Author. This vulnerability requires the victim to open a file from an untrusted source, which can lead to serious security breaches.

This vulnerability allows an attacker to run malicious code on a victim's computer if they open a specially crafted 3D file from an untrusted source in SAP 3D Visual Enterprise Author. It requires the victim to open the manipulated file, which can exploit memory management flaws in the software.

This vulnerability allows an attacker to consume excessive system resources on the nocodb application, potentially leading to service slowdowns or crashes. It can be exploited if the attacker has access to the application and can send requests that overwhelm the system.

This vulnerability allows an attacker to execute arbitrary code within the Budibase application, potentially leading to unauthorized access or data manipulation. It requires the attacker to have some level of access to the system where Budibase is running, making it important for users to update to version 1.3.20 or later to mitigate the risk.

This vulnerability allows an attacker with authenticated access to a device to potentially modify or access sensitive files and directories. However, the attacker must first find a way to log in to the device before they can exploit this weakness.

This vulnerability allows an attacker to manipulate the database of the Complaint Management System by injecting harmful SQL code through the 'cid' parameter in a specific webpage, potentially exposing sensitive data or allowing unauthorized access. The attacker needs to know the URL structure and have access to the complaint-details.php page to exploit this weakness.

This vulnerability allows an attacker to send specially crafted requests to an SAP Web Dispatcher, which can trick the connected back-end server into executing harmful commands. The attacker does not need to be authenticated, but they may need to send multiple requests to successfully exploit the issue.

This vulnerability allows an attacker to access sensitive information stored on an Android device without needing any special permissions or user interaction. It occurs due to a flaw in how the system checks input data, affecting multiple versions of Android from 8.1 to 11.

This vulnerability allows an attacker to access sensitive information on a user's system, which could lead to further attacks. To exploit it, the attacker needs the user to open a specially crafted file, often by tricking them into clicking a link in an email or message.

This vulnerability allows an attacker to run harmful code on a user's computer if they can trick the user into opening a specially crafted file in Microsoft Outlook. It’s particularly dangerous for users with administrative rights, as it could let the attacker take full control of the system, install programs, or access sensitive data.

This vulnerability allows an attacker to take control of a Windows 10 system by exploiting flaws in how the operating system handles certain fonts, which could let them install programs or access sensitive data. To succeed, the attacker needs to trick users into visiting a malicious website or opening a specially crafted document.