Splunk Config Explorer 安全漏洞

Splunk Config Explorer is an editor interface by Chris Younger, a personal developer. A security vulnerability exists in Splunk Config Explorer versions prior to 1.7.16. An attacker can exploit the vulnerability to execute arbitrary scripts on a web browser...

IrisEVTXModule 安全漏洞

IrisEVTXModule is a DFIR-IRIS open source interface module for extracting Microsoft EVTX log files. A security vulnerability exists in IrisEVTXModule versions prior to 1.0.0, which stems from the presence of an arbitrary file write issue that could lead to remote code execution RCE...

PT-2024-40178 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 5.2.25 Description: The issue allows for the execution of authorized foreign code under certain circumstances. Recommendations: For versions prior to 5.2.25, update to version 5.2.25 or later to resolve the issue...

CVE-2023-49331

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option...

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus prior to version 7271, which stems from a vulnerability that allows SQL injection in dashboard graphical...

WordPress plugin Landing Page Builder 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

CVE-2023-45743

Uncontrolled search path in some IntelR DSA software uninstallers before version 23.4.39.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

DEBIAN-CVE-2023-45745

Improper input validation in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access...

Intel Wireless Bluetooth 安全漏洞

Intel Wireless Bluetooth is a driver tool from Intel USA that can effectively solve some problems with intel bluetooth in win10 system. A security vulnerability existed prior to Intel Wireless Bluetooth version 23.20, which stems from the presence of improper access control. It may allow...

Intel oneVPL GPU 安全漏洞

The Intel oneVPL GPU is a product of Intel Corporation USA. It is a runtime implementation of the oneVPL API for Intel's generation of GPUs. A security vulnerability exists in Intel oneVPL software prior to version 23.3.5 that stems from the presence of a null pointer dereference issue. It could...

Intel Quartus Prime 安全漏洞

Intel Quartus Prime is a programmable logic device tool for the design and development of Fpga from Intel Corporation. A security vulnerability exists in Intel Quartus Prime prior to version 23.1 that stems from an improper condition checking issue. It could allow an authenticated user to escalat...

CVE-2024-27941

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected client systems do not properly sanitize input data before sending it to the SQL server. An attacker could use this vulnerability to compromise the whole database...

AZL-40550 CVE-2024-32607 affecting package hdf5 for versions less than 1.14.4.3-1

HDF5 Library through 1.14.3 has a SEGV in H5Aclose in H5Aint.c, resulting in the corruption of the instruction pointer...

PT-2024-3682 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: A vulnerability has been identified that allows an attacker to execute code in the context of the current process by exploiting an out of bounds read past the end of an allocated structure...

PT-2024-3775 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: A type confusion vulnerability has been identified in the affected application while parsing IGS files. This could allow an attacker to execute code in the context of the current process. T...

Oceanic 安全漏洞

Oceanic is a NodeJS library for interacting with Discord open-sourced by Oceanic. A security vulnerability exists in Oceanic versions prior to 1.10.4, which stems from uncleaned user input that may result in URL path traversal...

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager versions prior to 11.2.624071020, which stems from a security flaw in the pseudo-random number generator PRNG...

Telegram Web K 安全漏洞

Telegram Web K is a Webgram-based tool from the individual developer Eduard Kuzmenko. A security vulnerability exists in Telegram Web K versions prior to 2.0.0. An attacker exploited the vulnerability to perform cross-site scripting attacks...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, short message alerts, and product image scaling. A SQL injection vulnerability exists in PrestaShop mdgiftproduct versions prior to 1.4.1, which originates from...

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav versions prior to v2.2.0 that stems from exposing Kafka in the WAN interface, which could allow an unauthenticated attacker to perform various attacks...