CVE-2024-24258

freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function...

CVE-2024-21589

An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated network-based attacker to access reports without authenticating, potentially containing sensitive configuration information. A feature was introduced in version 3.1.0...

CVE-2024-21589 Paragon Active Assurance Control Center: Information disclosure vulnerability

An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated network-based attacker to access reports without authenticating, potentially containing sensitive configuration information. A feature was introduced in version 3.1.0...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0 <=3.5.3), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0 <=3.5.3) +1 more potentially affected by CVE-2023-41544 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0 <=3.5.3)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.5.3 Source cves: CVE-2023-41544 Source advisory: OSV:GHSA-49JP-CGHC-P5PJ...

CVE-2021-38927

CVE-2021-38927 affects IBM Aspera Console (3.4.0). The issue is a cross-site scripting vulnerability in the Web UI caused by insufficient input filtering/escaping, allowing an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. IBM’s security bul...

PKP-WAL 3.4.0-3 Remote Code Execution

--------------------------------------------------------------------------------- PKP-WAL getDeployment; 103. 104. $context = $deployment-getContext; 105. 106. $locale = $node-getAttribute'locale'; 107. if empty$locale 108. $locale = $context-getPrimaryLocale; 109. 110. 111. $coverImagelocale = ;...

Weseek GROWI Security Vulnerability

Weseek GROWI is a team collaboration software from Weseek Japan. A security vulnerability exists in Weseek GROWI versions prior to v3.4.0. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

CVE-2023-5896

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4...

CVE-2023-5896 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which stems from a buffer overflow vulnerability in the Zephyr STM32 Crypto driver...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which stems from a possible buffer overflow in the Bluetooth subsystem due to disabled assertions in /subsys/bluetooth/host/hcicore.c...

WordPress affiliate-toolkit Plugin <= 3.3.9 is vulnerable to Open Redirection

Software affiliate-toolkit Type Plugin Vulnerable versions = 3.3.9 Fixed in 3.4.0 OWASP Top 10 A1: Injection Classification Open Redirection CVE CVE-2023-45105 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID c91af7e93b47 Credits minhtuanact Required privilege Unauthenticat...

CVE-2021-46823 affecting package python-ldap for versions less than 3.4.0-1

CVE-2021-46823 affecting package python-ldap for versions less than 3.4.0-1. An upgraded version of the package is available that resolves this issue...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which stems from the fact that in a Bluetooth mesh network implementation, if an attacker has the public key to send an OOB, it can be...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0 <=3.5.5), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0 <=3.5.5) +1 more potentially affected by CVE-2023-40989 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0 <=3.5.5)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.5.5 Source cves: CVE-2023-40989 Source advisory: OSV:GHSA-RWHX-6HX7-PQC8...

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

Information disclosure

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

PT-2023-12126 · Lerry903 · Ruoyi

Name of the Vulnerable Software and Affected Versions: lerry903 RuoYi version 3.4.0 Description: An issue was discovered in the getRememberedSerializedIdentity function in the CookieRememberMeManager class, allowing remote attackers to escalate privileges. Recommendations: For version 3.4.0,...

RuoYi Security Breach

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. lerry903 A security vulnerability exists in RuoYi version 3.4.0, which originates from allowing an attacker to perform elevation of privilege via the getRememberedSerializedIdentity function...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0 <=3.5.2), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0 <=3.5.2) +1 more potentially affected by CVE-2023-38992 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0 <=3.5.2)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.5.2 Source cves: CVE-2023-38992 Source advisory: OSV:GHSA-WP6C-29R3-JQW9...