PT-2024-4540 · Vmware · Vmware Vcenter Server +2

Name of the Vulnerable Software and Affected Versions: vCenter Server affected versions not specified VMware Cloud Foundation affected versions not specified Description: The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may...

PT-2024-35120 · Mintplex · Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm affected versions not specified Description: An uncontrolled resource consumption issue exists in the "upload-link" endpoint, allowing attackers to cause a denial of service DOS by shutting down the server through...

Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2024-28623)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2024-28702)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by...

Adobe Commerce Cross-Site Scripting Vulnerability (CNVD-2024-28955)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A cross-site scripting vulnerability exists in Adobe Commerce, which can be exploited by an attacker to inject malicious script into vulnerable form...

SolarWinds Serv-U FTP Server Directory Traversal Vulnerability

Serv-U FTP Server is a File Transfer Protocol FTP server software. A SolarWinds Serv-U FTP Server directory traversal vulnerability can be exploited by an attacker to read arbitrary files by constructing a malicious request...

WordPress Brave Popup Builder plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting...

PYSEC-2024-242

A Local File Inclusion LFI vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../'. An attacker can...

File Upload Vulnerability in PACS System of Infinera Software (Shanghai) Co.

Infinera is a company specializing in the development of medical imaging systems. A file upload vulnerability exists in the PACS system of Infida Software Shanghai Co. Ltd. that can be exploited by an attacker to gain server privileges...

Online Student Enrollment System SQL Injection Vulnerability (CNVD-2024-26370)

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. A SQL injection vulnerability exists in Online Student Enrollment System version 1.0, which can be exploited by an attacker to view, add, modify, or delete information in the back-en...

Online Student Enrollment System SQL Injection Vulnerability (CNVD-2024-26367)

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. A SQL injection vulnerability exists in Online Student Enrollment System version 1.0, which can be exploited by an attacker to view, add, modify, or delete information in the back-en...

Mattermost Server Access Control Error Vulnerability (CNVD-2024-26102)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. An access control error vulnerability exists in Mattermost Server, which can be exploited by an attacker to bypass access restrictions and view all details of a script run when the run is marked as...

WBSAirback cross-site scripting vulnerability (CNVD-2024-27121)

WBSAirback is a next generation storage and backup system from WBSAirback. A cross-site scripting vulnerability exists in WBSAirback version 21.02.04, which can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a crafted payload...

Adobe Acrobat Reader Resource Management Error Vulnerability (CNVD-2024-24939)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader suffers from a resource management error vulnerability that stems from the presence of post-release reuse, which can be exploited by an attacker...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability. Attackers have exploited the vulnerability to cause a kernel panic...

The vulnerability of the l2cap_chan_timeout() function in the Linux kernel’s Bluetooth subsystem allows a hacker to trigger a service failure.

The vulnerability of the l2capchantimeout function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the swapping of the zero pointer due to concurrent access to resources race condition. Exploiting this vulnerability could allow a attacker to cause...

Mozilla Firefox Spoofing Vulnerability (CNVD-2024-23343)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox has a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks by convincing a victim to visit a specially crafted Web site...

Google gVisor 安全漏洞

Google gVisor is a user-space kernel written in the Go language for use in Linux systems. A security vulnerability exists in Google gVisor. An attacker exploited the vulnerability to cause a denial of service on the system...

Mozilla Firefox Code Execution Vulnerability (CNVD-2024-23339)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A code execution vulnerability exists in Mozilla Firefox, which can be exploited by attackers to execute arbitrary code or cause a denial of service on a vulnerable system...

CVE-2024-1913

CVE-2024-1913 affects ABB RobotWare on IRC5 OmniCore: RobotWare 6.00–6.15.05 (excluding 6.10.10 and 6.13.07) and RobotWare 7.00–7.13 are vulnerable. A specially crafted message processing condition can cause the robot to stop, make the controller inaccessible, or allow arbitrary code execution. R...