Asseco Business Solutions Wapro ERP 安全漏洞

Asseco Business Solutions Wapro ERP is an enterprise-oriented ERP software from Asseco Business Solutions, Poland. A security vulnerability exists in Asseco Business Solutions Wapro ERP versions prior to 9.00.0, which stems from vulnerability to server-side MS SQL protocol downgrade requests, whi...

PT-2024-36321 · Unknown · Mohamed Riyaz Admin Customization

Name of the Vulnerable Software and Affected Versions: Mohamed Riyaz Admin Customization versions prior to 2.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on...

Rizin 安全漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...

GStreamer 代码问题漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A code issue vulnerability exists in GStreamer versions prior to 1.24.10, which stems from a null reference vulnerability affecting the qtdemuxparsesbgp function in qtdemux.c. The vulnerability is caused ...

CVE-2024-11639

An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access...

PT-2024-9327 · Microsoft · Remote Desktop +1

Name of the Vulnerable Software and Affected Versions: Microsoft Remote Desktop versions prior to 1.2.5807 Description: The issue is related to a remote code execution vulnerability in the Remote Desktop Client, which is associated with inadequate access control. This vulnerability can be exploit...

PT-2024-14001 · Unknown · Metform Elementor Contact Form Builder

Name of the Vulnerable Software and Affected Versions: Metform Elementor Contact Form Builder versions prior to 3.4.0 Description: The issue is related to a Missing Authorization vulnerability in Metform Elementor Contact Form Builder, which allows exploiting incorrectly configured access control...

DEBIAN-CVE-2024-53856

rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...

Eaton IPP 安全漏洞

Eaton IPP is a power management software from Eaton Corporation USA. A security vulnerability exists in Eaton IPP versions prior to v1.71, which stems from insufficient validation of data authenticity and could cause the system to accept invalid data...

CVE-2021-38116

Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager. This impacts all versions before 3.2.5...

SUSE CVE-2024-10224

Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by opening a "pesky pipe" such as passing "commands|" as a filename or by passing arbitrary strings to eval...

upKeeper 安全漏洞

upKeeper is a cloud-based or local solution from upKeeper Inc. A security vulnerability exists in upKeeper versions prior to 1.2, which stems from the presence of an incorrect privilege management vulnerability that allows privilege escalation...

GLPI 跨站脚本漏洞

GLPI is an open source IT and asset management software from an individual developer. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and i...

Budget Control Gateway 授权问题漏洞

Budget Control Gateway is a gateway component of the Budget Control application from BudgetControl open source. An authorization issue vulnerability exists in Budget Control Gateway versions prior to 1.2 that stems from failure to properly validate authentication tokens, allowing an attacker to...

Intel QAT 安全漏洞

The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. An information disclosure vulnerability exists in Intel QAT Engine for OpenSSL software, which can be exploited by...

Element 安全漏洞

Element is a Matrix web collaboration client from Element Open Source. A security vulnerability exists in Element versions prior to 1.11.85, which originates from a malicious master server that sends invalid messages...

F5 Networks BIG-IP : SQLite vulnerability (K000148494)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148494 advisory. SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c...

PT-2024-34848 · Mahesh Waghmare · Mg Post Contributors

Name of the Vulnerable Software and Affected Versions: MG Post Contributors versions prior to 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This is a Reflected XSS vulnerability, which exists in Mahesh...

CVE-2024-49406

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2024 Release 1 prior to version 1, which stems from Dressroom containing an improper...