4044 matches found
BIT-DJANGO-2021-45116
An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a...
BIT-DJANGO-2023-24580
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs e.g., an excessive number of parts to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for ...
Important Photon OS Security Update - PHSA-2024-4.0-0575
Updates of 'linux', 'linux-aws', 'linux-rt', 'linux-secure' packages of Photon OS have been released...
CVE-2024-2016
CVE-2024-2016 affects ZhiCms 4.0; the vulnerability is in the index function of app/manage/controller/setcontroller.php where manipulating the sitename argument leads to code injection. It is exploitable remotely, and the exploit has been publicly disclosed (VDB-255270). No official patched versi...
CVE-2024-2015 ZhiCms mcontroller.php getindexdata sql injection
A vulnerability, which was classified as critical, has been found in ZhiCms 4.0. This issue affects the function getindexdata of the file app/index/controller/mcontroller.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-2015
The CVE-2024-2015 entry concerns ZhiCms 4.0. The vulnerability is in the getindexdata function of app/index/controller/mcontroller.php, where manipulation of the key argument enables SQL injection. Exploitation can be performed remotely, and public disclosures exist (VDB-255269). Some connected s...
PT-2024-18627 · Zhicms · Zhicms
Name of the Vulnerable Software and Affected Versions: ZhiCms version 4.0 Description: A critical issue has been found in ZhiCms, affecting the getindexdata function of the file app/index/controller/mcontroller.php. The manipulation of the key argument leads to SQL injection. The attack may be...
PT-2024-18628 · Zhicms · Zhicms
Name of the Vulnerable Software and Affected Versions: ZhiCms version 4.0 Description: A critical vulnerability was found in the function index of the file app/manage/controller/setcontroller.php. The manipulation of the argument sitename leads to code injection. It is possible to launch the atta...
Important Photon OS Security Update - PHSA-2024-4.0-0574
Updates of 'linux-rt', 'apache-tomcat', 'linux-aws', 'linux-secure', 'c-ares' packages of Photon OS have been released...
CVE-2023-25922 IBM Security Guardium Key Lifecycle Manager file upload
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247621...
How CVSS 4.0 changes (or doesn’t) the way we see vulnerability severity
Finding, managing and patching security vulnerabilities on any network, no matter the size, is a tall task. In the first week of 2024 alone, there were 621 new common IT security vulnerabilities and exposures CVEs disclosed worldwide, covering a range of applications, software and hardware that...
Explanation of New Authenticated Scanning PCI DSS Requirement 11.3.1.2 in PCI DSS V4.0 and how InsightVM can help meet the Requirement
By: Dominick Vitolo, VP of Security Services, MegaplanIT As a Certified Qualified Security Assessor QSA company and a trusted Rapid7 partner, MegaplanIT is committed to guiding organizations through the complexities of compliance and security standards. PCI DSS version 4.0 is a significant update...
Important Photon OS Security Update - PHSA-2024-4.0-0565
Updates of 'linux-rt', 'linux-aws', 'linux-secure', 'linux', 'unbound' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2024-4.0-0563
Updates of 'bindutils' packages of Photon OS have been released...
CVE-2021-22281 Zip Slip Vulnerability in B&R Automation Studio Project Import
: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12...
PT-2024-10876 · B&R Industrial Automation · Automation Studio
Name of the Vulnerable Software and Affected Versions: B&R Industrial Automation Automation Studio versions 4.0 through 4.12 Description: The issue is related to a Relative Path Traversal vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations...
B&R Industrial Automation Studio Code Injection Vulnerability
B&R Industrial Automation Studio is a suite of integrated development environments IDEs used by B&R Industrial Automation, an Austrian company, to develop and program its automation solutions. A code injection vulnerability exists in B&R Industrial Automation Studio versions 4.0 through 4.12 that...
Important Photon OS Security Update - PHSA-2024-4.0-0557
Updates of 'wireshark' packages of Photon OS have been released...
SUSE: Security Advisory (SUSE-SU-2024:0209-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...