382 matches found
CVE-2023-40587
Pyramid (Python web framework) versions 2.0.0–2.0.1 are affected by a directory-traversal vulnerability in a Pyramid static view that can disclose index.html located one directory above the static view path when accessed with Python 3.11. The issue stems from os.path.normpath behavior and affects...
CVE-2023-40587 Pyramid static view path traversal up one directory
Pyramid is an open source Python web framework. A path traversal vulnerability in Pyramid versions 2.0.0 and 2.0.1 impacts users of Python 3.11 that are using a Pyramid static view with a full filesystem path and have a index.html file that is located exactly one directory above the location of t...
Pyramid static view path traversal up one directory
Impact This impacts users of Python 3.11 that are using a Pyramid static view with a full filesystem path and have a index.html file that is located exactly one directory above the location of the static view's file system path. No further path traversal exists, and the only file that could be...
CVE-2023-34672
Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile. An attack could occur over the public Internet in some cases...
CVE-2023-34672
Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile. An attack could occur over the public Internet in some cases...
Code injection
Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases...
CVE-2023-34671
Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role in the user profile. An attack could occur over the public Internet in some cases...
CVE-2023-34671
Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role in the user profile. An attack could occur over the public Internet in some cases...
CVE-2023-34672
Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile. An attack could occur over the public Internet in some cases...
Elenos ETG150 安全漏洞
The Elenos ETG150 is an FM transmitter from Elenos. A security vulnerability exists in the Elenos ETG150 FM transmitter version 3.12, which can be exploited by an attacker to disclose SMTP credentials and other sensitive information through an accessible Memcached service...
Elenos ETG150 安全漏洞
The Elenos ETG150 is an FM transmitter from Elenos. A security vulnerability exists in the Elenos ETG150 FM transmitter version 3.12 that stems from the presence of incorrect access control, which can be exploited by an attacker to escalate user role privileges using a user profile...
WordPress plugin BackupWordPress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...
PT-2023-15918 · WordPress · Backupwordpress
Name of the Vulnerable Software and Affected Versions: BackupWordPress plugin for WordPress versions up to, and including 3.12 Description: The issue is related to information disclosure due to missing authorization on the heartbeat received function, which triggers on WordPress heartbeat. This...
[SECURITY] Fedora 36 Update: python3.12-3.12.0~a3-1.fc36
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...
GSD-2022-1008368 nfs4: Fix kmemleak when allocate slot failed
nfs4: Fix kmemleak when allocate slot failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.333 by commit...
PT-2022-34505 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.12 through v4.14.290 Description: A memory leak issue has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.12 through v4.14.290, update...
CVE-2020-10735 vulnerabilities
Vulnerabilities for packages: python...
CVE-2020-10735 vulnerabilities
Vulnerabilities for packages: python...
Ambit Technologies iTech Real Estate Script SQL注入漏洞
Ambit Technologies iTech Real Estate Script is an intelligent PHP script by Ambit Technologies India. Properties for sale and rent can be listed using the edit option to edit property details. Ambit Technologies iTech Real Estate Script version 3.12 suffers from a SQL injection vulnerability that...
