12035 matches found
Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple
CVE-2019-9053 Exploit Python 3 This repository contains an e...
Exploit for OS Command Injection in Eparks Fiberlink_210_Firmware
CVE-2023-33617 Authenticated OS command injection vulnerabili...
AZL-34554 CVE-2023-1981 affecting package avahi for versions less than 0.8-3
A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash...
CVE-2023-33780
A stored cross-site scripting XSS vulnerability in TFDi Design smartCARS 3 v0.7.0 and below allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the body of news article...
CVE-2023-33780
CVE-2023-33780 affects TFDi Design smartCARS 3, versions up to 0.7.0. The vulnerability is a stored XSS that allows an attacker to inject arbitrary scripts/HTML into the body of a news article, with impact primarily on confidentiality and integrity (CVSS v3.1: 5.4, MEDIUM). The underlying issue i...
CVE-2023-33780
A stored cross-site scripting XSS vulnerability in TFDi Design smartCARS 3 v0.7.0 and below allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the body of news article...
AZL-43702 CVE-2023-31147 affecting package python-pycares 3.1.1-3
c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand so will generate predictable output. Input from the random number generator i...
Ubuntu: Security Advisory (USN-6074-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS : Firefox regressions (USN-6074-3)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6074-3 advisory. USN-6074-1 fixed vulnerabilities and USN-6074-2 fixed minor regressions in Firefox. The update introduced several minor regressions. This update fixes...
Oracle Linux 8 : php:7.4 (ELSA-2023-2903)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2903 advisory. - CVE-2015-2331: integer overflow when processing ZIP archives 1204676,1204677 - fixes for CVE-2012-1162 and CVE-2012-1163 - fix: due to an integer...
[SECURITY] [DLA 3428-1] node-nth-check security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3428-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès May 20, 2023 https://wiki.debian.org/LTS -...
[SECURITY] Fedora 37 Update: rust-pore-0.1.8-3.fc37
Performance oriented reimplementation of repo...
EulerOS 2.0 SP10 : haproxy (EulerOS-SA-2023-1976)
According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka 'request...
CVE-2023-32956
Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in CGI component in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to execute arbitrary code via unspecified vectors...
Ubuntu: Security Advisory (USN-6060-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-2773 · Synology · Synology Router Manager
Name of the Vulnerable Software and Affected Versions: Synology Router Manager versions prior to 1.2.5-8227-6 Synology Router Manager versions prior to 1.3.1-9346-3 Description: The issue is related to an OS command injection vulnerability in the CGI component of Synology Router Manager. This...
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2023-1927)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.10.1 : python3 (EulerOS-SA-2023-1896)
According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows...
Security Bulletin: A security vulnerability in Node.js xmldom and msgpack5 module affects IBM Cloud Automation Manager
Summary A security vulnerability in Node.js xmldom and msgpack5 module affects IBM Cloud Automation Manager. Vulnerability Details CVEID:CVE-2021-21366 DESCRIPTION: Node.js xmldom module could allow a remote attacker to bypass security restrictions, caused by improper preserve of system...
