595 matches found
PT-2025-7549 · Lsquic · Lsquic
Name of the Vulnerable Software and Affected Versions: LSQUIC versions prior to 4.2.0 Description: A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server by initiating connections with colliding Source...
Litespeed Technologie LiteSpeed QUIC（LSQUIC） 安全漏洞
Litespeed Technologie LiteSpeed QUIC LSQUIC is an open source implementation of QUIC and HTTP/3 functionality for servers and clients from Litespeed Technologie, USA. A security vulnerability exists in Litespeed Technologie LiteSpeed QUIC LSQUIC prior to version 4.2.0 that stems from the presence...
CVE-2020-26225
In PrestaShop Product Comments before version 4.2.0, an attacker could inject malicious web code into the users' web browsers by creating a malicious link. The problem was introduced in version 4.0.0 and is fixed in 4.2.0...
CVE-2024-21649
The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning FL and Multi-Party Computation MPC. Prior to 4.2.0, authenticated users could inject code into algorithm environment variables, resulting in remote code execution. This vulnerability is...
PT-2025-1724 · Pimcore · Pimcore/Customer-Data-Framework
Name of the Vulnerable Software and Affected Versions: Pimcore customer-data-framework versions 4.2.0 and earlier Description: A critical issue has been found in Pimcore customer-data-framework, affecting some unknown functionality of the file "/admin/customermanagementframework/customers/list"...
Debian dla-4026 : libtiff-dev - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4026 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4026-1 [email protected]...
CVE-2020-35504 affecting package qemu-kvm 4.2.0-48
CVE-2020-35504 affecting package qemu-kvm 4.2.0-48. No patch is available currently...
CVE-2021-3507 affecting package qemu-kvm 4.2.0-48
CVE-2021-3507 affecting package qemu-kvm 4.2.0-48. No patch is available currently...
CVE-2022-1050 affecting package qemu-kvm 4.2.0-38
CVE-2022-1050 affecting package qemu-kvm 4.2.0-38. This CVE either no longer is or was never applicable...
CVE-2021-3611 affecting package qemu-kvm 4.2.0-48
CVE-2021-3611 affecting package qemu-kvm 4.2.0-48. No patch is available currently...
CVE-2022-0216 affecting package qemu-kvm 4.2.0-48
CVE-2022-0216 affecting package qemu-kvm 4.2.0-48. No patch is available currently...
PT-2024-36795 · Unknown · Onyxia-Api
Name of the Vulnerable Software and Affected Versions: Onyxia-API versions prior to 2.8.2 Onyxia-API versions prior to 3.1.1 Onyxia-API versions prior to 4.2.0 Description: This issue allows authenticated users to remotely execute code within the Onyxia-API, potentially leading to unauthorized...
CVE-2023-51359
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 4.2.0...
WordPress plugin Essential Blocks for Gutenberg 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
DEBIAN-CVE-2024-11596
ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file...
DEBIAN-CVE-2024-11595
FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file...
Wireshark Security Update (wnpa-sec-2024-13) - Linux
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Wireshark Security Update (wnpa-sec-2024-13) - Mac OS X
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Wireshark Security Update (wnpa-sec-2024-13) - Windows
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...