51350 matches found
cvelistV5
Примечание 2026-2-17: Добавлен дополнительный день обработки для нормализации дат с целью устранения потенциальных несоответствий Новое расписание нормализации дат: 16.02.26 — 28.02.26 Примечание 2026-2-10: Изменение файлаdeltaLog.json при нормализации дат записей Файл deltaLog.json обычно хранит...
TFTPlunder
TFTPlunder: CVE-2023-29930용 익스플로잇 이것은 Genesys이전 명칭 InIn TFTP 프로비저닝 서버의 블라인드 파일 읽기/쓰기 취약점을 위한 익스플로잇 스크립트입니다. 취약점 정보 이 취약점은 TFTP 루트 경로와 파일 확장자에 대한 제한 없는 구성 옵션 때문에 발생합니다. 즉, Admin 인터페이스에서 TFTP를 원하는 디렉터리로 변경하고 원하는 파일을 업로드하거나 다운로드할 수 있습니다. 단, TFTP는 프로토콜상 파일 목록을 허용하지 않으므로 이것이 블라인드 파일 읽기 취약점이 되는 이유입니다. ...
LiteSpeed Cache <= 5.7 - Unauthenticated Stored XSS
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache- from n/a through 5.7. id: CVE-2023-40000 info: name: LiteSpeed Cache = 5.7 - Unauthenticated Stored XSS...
Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection
Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...
Extreme Management Center 8.4.1.24 - Cross-Site Scripting
Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...
XWiki Platform - SQL Injection
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an...
GitLab CE/EE - Information Disclosure
GitLab CE/EE is susceptible to information disclosure. An attacker can access runner registration tokens using quick actions commands, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized operations. Affected versions are from 12.10 before 14.6.5,...
Juniper Web Device Manager - Cross-Site Scripting
Juniper Web Device Manager J-Web in Junos OS contains a cross-site scripting vulnerability. This can allow an unauthenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web, which can allow the attacker to steal...
WS_FTP-CVE-2023-40044
WSFTP-CVE-2023-40044 Dépôt contenant tout ce que j'ai pour suivre l'impact de WSFTP CVE-2023-40044 Inclut les organisations et domaines potentiellement affectés utilisant des méthodes d'en-tête. J'ai également construit un ticker d'actualités qui suit les nouvelles histoires sur MOVEit et WSFTP,...
MOVEit-CVE-2023-34362
MOVEit-CVE-2023-34362 Dépôt contenant tout ce que j'ai pour suivre l'impact de la CVE-2023-34362 de MOVEit Inclut les organisations et domaines potentiellement affectés utilisant des méthodes de découverte d'en-tête SFTP et de cookie. J'ai également construit un fil d'actualités qui suit les...
CVE-2026-79266 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-79238 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-79088 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-55GR-F7M4-MRQX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-859R-QGH9-2MWV vulnerabilities
Vulnerabilities for packages: chromium...
NPM: toml-node: Uncontrolled Recursion
NPM: toml-node: Uncontrolled Recursion vulnerability discovered by ? in WordPress Npm toml versions 4.2.0...
CVE-2026-84757
Unauthenticated Settings Change in WP Compress = 7.21.28 versions...
Apache Flink 1.5.1 - Local File Inclusion
Apache Flink 1.5.1 is vulnerable to local file inclusion because of a REST handler that allows file uploads to an arbitrary location on the local file system through a maliciously modified HTTP HEADER. id: CVE-2020-17518 info: name: Apache Flink 1.5.1 - Local File Inclusion author: pdteam severit...
EUVD-2024-55748
A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user privileges. If exploited, the threat actor can modify and delete the project...
Vite - Arbitrary File Read
Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. @fs denies access to files outside of Vite serving allow list. Adding ?raw?? or ?import&raw?? to the URL bypasses this limitation and returns the file content if it...