2521 matches found
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Directory Traversal File Write Vulnerability
Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Directory Traversal File Write Exploit Exploit Author: LiquidWorm Vendor: SOUND4 Ltd. Product web page: https://www.sound4.com | https://www.sound4.biz Affected version: FM/HD Radio Processing: Impact/Pulse/First Version 2: 1.1/2.15...
HAProxy 安全漏洞
Haproxy HAProxy is an open source TCP/HTTP load balancing server from the French company Haproxy. The server provides 4-layer and 7-layer proxies and can support tens of thousands of levels of connections with high efficiency and stability. A security vulnerability exists in HAProxy. An attacker...
WordPress LOGIN AND REGISTRATION ATTEMPTS LIMIT Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software LOGIN AND REGISTRATION ATTEMPTS LIMIT Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47138 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4560404acee4 Credits...
Ulkem PtteM Kart SQL注入漏洞
Ulkem PtteM Kart is an application from Ulkem Turkey. A security vulnerability exists in Ulkem PtteM Kart versions prior to 2.1, which stems from improper neutralization of special elements, leading to SQL injection...
PT-2023-9865 · Unknown · Email Registration
Name of the Vulnerable Software and Affected Versions: Email Registration versions 5.x-2.1 Description: A critical issue affects the email registration user function of the email registration.module file. The manipulation of the namenew argument leads to SQL injection. The attack can be initiated...
CVE-2023-0228 Improper authentication vulnerability in S+ Operations
Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...
ABB Symphony Plus S+ Operations 授权问题漏洞
ABB Symphony Plus S+ Operations is a decentralized control system from ABB. An authorization issue vulnerability exists in ABB Symphony Plus S+ Operations, which stems from the presence of incorrect authentication, and affects the following products and versions: Symphony Plus S+ Operations...
Checkmk 2.0.x < 2.0.0p29, 2.1.x < 2.1.0p11 Insufficient Session Expiration Vulnerability
Checkmk is prone to an insufficient session expiration vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2023-15694 · Checkmk · Checkmk
Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.0.0p1 through 2.0.0p28 Checkmk versions 2.1.0p1 through 2.1.0p10 Description: The issue arises from the insecure termination of expired sessions in the RestAPI, allowing an attacker to utilize expired session tokens for...
SUSE CVE-2013-4532
Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process...
SUSE CVE-2014-6272
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...
SUSE CVE-2018-11760
When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...
PT-2023-1303 · Moxa · Moxa Sds-3008 Series Industrial Ethernet Switch
Name of the Vulnerable Software and Affected Versions: Moxa SDS-3008 Series Industrial Ethernet Switch version 2.1 Description: A stored cross-site scripting issue exists in the web application functionality. This can be triggered by a specially-crafted HTTP request, leading to arbitrary Javascri...
NetChess 2.1 Buffer Overflow Exploit
Exploit Title: NetChess2.1 Buffer Overflow SEH Exploit Author: Ugur Eminli Vendor Homepage: https://sourceforge.net/projects/avmnetchess/ Software Link: https://sourceforge.net/projects/avmnetchess/ Version: 2.1 Tested on: WinXP SP2 Build 2600 !/usr/bin/perl my $file= "exploit.pgn"; my $junk=...
Security Bulletin: IBM MQ Internet Pass-Thru is vulnerable to an issue within IBM® Runtime Environment Java™ Technology Edition, Version 7 and Version 8 (CVE-2022-21626)
Summary IBM MQ Internet Pass-Thru has addressed the following vulnerability in the IBM® Runtime Environment Java™ Technology Edition, Version 7 and Version 8 used by IBM MQ Internet Pass-Thru. Vulnerability Details CVEID:CVE-2022-21626 DESCRIPTION: An unspecified vulnerability in Java SE related ...
PT-2023-15650 · Nostromo · Nostromo
Name of the Vulnerable Software and Affected Versions: Nostromo versions prior to 2.1 Description: The issue allows an attacker to execute arbitrary commands on the remote server due to a path traversal vulnerability. This occurs when the homedirs option is used. Recommendations: For versions pri...
GHSA-8PH8-9Q2J-C3RQ nodebatis SQL Injection vulnerability
A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 can address this issue. The name of the patch is 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. It is...
CVE-2022-47663
GPAC MP4box 2.1-DEV-rev649-ga8f438d20 is vulnerable to buffer overflow in h263dmxprocess filters/reframeh263.c:609...
