PT-2023-30461

Name of the Vulnerable Software and Affected Versions jeecg-boot version 3.6.0 Description A Directory Traversal issue allows a remote privileged attacker to obtain sensitive information via the file directory structure. Recommendations For jeecg-boot version 3.6.0, at the moment, there is no...

CVE-2023-47467

Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure...

jeecg-boot Security Vulnerabilities

Jeecg-Boot is a code generator based low-code platform from the JeecgBoot community. A security vulnerability exists in jeecg-boot version v.3.6.0, which stems from the presence of a directory traversal vulnerability. An attacker can exploit the vulnerability to obtain sensitive information throu...

Wireshark Security Vulnerabilities

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark that stems from a buffer overflow vulnerability in...

PT-2023-7176 · Wireshark +3 · Wireshark +3

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.6.0 through 3.6.18 Wireshark versions 4.0.0 through 4.0.10 Description: The issue is related to a NetScreen file parser crash in Wireshark, which can be exploited to cause a denial of service via a crafted capture file...

CVE-2023-45684

Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub...

UBUNTU-CVE-2023-45684

Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub...

WordPress Code Snippets Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Code Snippets Type Plugin Vulnerable versions = 3.5.0 Fixed in 3.6.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47666 Patch priority Low CVSS severity Low 4.3 Developer Code Snippets Pro PSID 3f0e2c5bc521 Credits Huynh Tien Si...

What new is coming in reactor-core 3.6.0?

Reactor 3.6.0 is coming and going to be GA on November 14. This blogpost describes new features that are included in this upcoming release! Virtual Threads support Today, everyone talks about Java 21 and Project Loom. The Project Reactor team hears that and sees value in that project within our...

CVE-2020-27630

CVE-2020-27630 affects Silicon Labs uC/TCP-IP 3.6.0, where TCP Initial Sequence Numbers (ISNs) are generated improperly. The vulnerability stems from ISN generation using a linear-congruential-like pattern, enabling spoofing/disruption of TCP connections. The primary impacted stack is uC/TCP-IP (...

PT-2023-27638 · Unknown · Springblade

Name of the Vulnerable Software and Affected Versions: SpringBlade versions =V3.6.0 Description: The issue is related to Incorrect Access Control due to an incorrect configuration in the default gateway, resulting in unauthorized access to error logs. Recommendations: For SpringBlade versions...

PT-2023-8132 · Unknown · Springblade

Name of the Vulnerable Software and Affected Versions: SpringBlade version 3.6.0 Description: The issue is related to the lack of protection against SQL query structure exploitation, allowing a remote attacker to execute arbitrary SQL queries. Specifically, in SpringBlade, when executing SQL...

Design/Logic Flaw

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

Libbitcoin Explorer Security Feature Issue Vulnerability

Libbitcoin Explorer is a bitcoin command line tool open-sourced by Libbitcoin. Libbitcoin Explorer versions 3.0.0 through 3.6.0 suffer from a security vulnerability that stems from a security issue with the currency's encryption technology leading to the theft of funds...

Kirby 安全漏洞

Kirby is a file-based content management system CMS. A security vulnerability exists in Kirby versions 3.5.8.2 and earlier, 3.6.0 through 3.6.6.2, 3.7.0 through 3.7.5.1, 3.8.0 through 3.8.4, and 3.9.0 through 3.9.5, which stems from a vulnerability that allows an external visitor to update Kirby...

CVE-2023-30153

An SQL injection vulnerability in the Payplug payplug module for PrestaShop, in versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.7.0 and 3.7.1, allows remote attackers to execute arbitrary SQL commands via the ajax.php front controller...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image zoom. A security vulnerability exists in PrestaShop, which originates from a SQL injection vulnerability in the...

CVE-2023-2066

The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'bulletinwpupdatebulletinstatus', 'bulletinwpupdatebulletin', 'bulletinwpupdatesettings', 'bulletinwpupdatestatus',...

PT-2023-17529 · WordPress · The Announcement & Notification Banner – Bulletin

Name of the Vulnerable Software and Affected Versions: The Announcement & Notification Banner – Bulletin plugin for WordPress versions up to, and including, 3.6.0 Description: The issue allows unauthorized access and modification of data due to a missing capability check on the bulletinwp update...

WordPress Plugin Announcement&Notification Banner–Bulletin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...