10407 matches found
CVE-2023-3438
An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service mvagtsce.exe. The misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalwar...
Exploit for Improper Authentication in Wpdeveloper Essential_Addons_For_Elementor
WP-CVE-2023-32243 Python 2.7 Buy Coffee : Bitcoin $: 14nXhmR...
PT-2023-4535
Name of the Vulnerable Software and Affected Versions Nullsoft Scriptable Install System NSIS versions prior to 3.09 Description The issue is related to insufficient access control in the Nullsoft Scriptable Install System, which can be exploited by a remote attacker to elevate their privileges...
Nullsoft Scriptable Install System 安全漏洞
Nullsoft Scriptable Install System is a professional open source system for creating Windows installers. A security vulnerability exists in Nullsoft Scriptable Install System NSIS versions prior to 3.09, which stems from improper handling of access control to the uninstaller directory...
CVE-2023-37378
Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...
CVE-2023-37378
Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...
The vulnerability of the Google Chrome browser’s extension can compromise their integrity and also lead to service failures.
The vulnerability of the Google Chrome browser extension is related to the overflow of the heap buffer and the installation of malicious extensions. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service interruptions throug...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in WavPack ( CVE-2021-44269)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in WavPack, caused by a heap out-of-bounds read flaw in WavpackPackSamples function in src/packutils.c CVE-2021-44269. WavPack is included as part of the runtimes in our service. This...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow (CVE-2023-25658)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow, caused by an out-of-bounds read in GRUBlockCellGrad CVE-2023-25658. TensorFlow is included as part of the runtimes in our service. This vulnerabilitiy has been addressed...
Missing Authorization
github.com/mattermost/mattermost-server is vulnerable to Missing Authorization. The vulnerability exists because the library does not verify whether the requestor is a system admin or not before allowing install requests to the Apps, allowing regular users to send malicious install requests to th...
Google Pixel 竞争条件问题漏洞
Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in installKey in KeyUtil.cpp, where file encryption may fail due to a competitive condition, which could lead to local information disclosure...
CVE-2023-25307
nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...
Directory traversal
nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...
CVE-2023-25307
nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...
CVE-2023-25307
CVE-2023-25307 affects the command‑line tool nothub/mrpack-install, specifically versions
mrpack-install 路径遍历漏洞
mrpack-install is a cli application for installing Minecraft servers and Modrinth modpacks by Florian H. Individual developer. A security vulnerability exists in mrpack-install version 0.16.2 and earlier versions, which stems from the presence of a path traversal vulnerability...
GHSA-5M3M-Q8CQ-77G4 fuadmin vulnerable to insecure file upload
funadmin v3.3.2 and v3.3.3 are vulnerable to insecure file upload via the plugins install...
fuadmin vulnerable to insecure file upload
funadmin v3.3.2 and v3.3.3 are vulnerable to insecure file upload via the plugins install...
