Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel 6.7.4 and earlier versions, which stems from a missing check for struct dmioctl.targetcount and is prone to crashes...

Number withdrawn

This CVE number has been withdrawn...

Exiv2 Security Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata from the individual developer Andreas Huggel. The product provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. A security vulnerability exists in Exiv2...

Min Security breach

Min is a fast, minimalist browser from Min Open Source. A security vulnerability exists in versions prior to Min 1.31.0, which stems from an incorrect restriction on local files resulting in a security hole...

Snow Software Inventory Agent Security Vulnerability

Snow Software Inventory Agent is an agent program from Snow Software, a Swedish company. A security vulnerability exists in Snow Software Inventory Agent that stems from a Spoofing Bypass Authentication vulnerability that allows signature spoofing...

Elastic Security Breach

Elastic is the Netherlands Elastic company's set of open source distributed RESTful search engine built on Lucene . The product is primarily used in cloud computing and supports data indexing using JSON over HTTP. A security vulnerability exists in Elastic that stems from the possibility that a...

MinIO 安全漏洞

MinIO is an open source object storage server from US-based MinIO. The product supports building infrastructures for machine learning, analytics, and application data workloads. MinIO has a security vulnerability. An attacker can gain higher privileges by exploiting the vulnerability...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome WebRTC module, which stems from a confusion in the instructions responsible for freeing memory in the WebRTC module. An attacker can exploit this vulnerability to execu...

SEO Panel Cross-Site Request Forgery Vulnerability

SEO Panel is an open source panel for managing website SEO Search Engine Optimization. A cross-site request forgery vulnerability exists in SEO Panel version 4.10.0, which originates from a vulnerability that allows a remote attacker to perform an unauthorized user password reset...

Sichuan Yougou Technology KuERP Security Breach

Sichuan Yougou Technology KuERP is an e-commerce platform of Sichuan Yougou Technology, a Chinese company. A security vulnerability exists in Sichuan Yougou Technology KuERP version 1.0.4, which originates from a path traversal issue in the delsndb function in the file...

Rebuild Security Vulnerability

Rebuild is a highly customizable enterprise management system. A security vulnerability exists in Rebuild version 3.5.5 due to a server-side request forgery vulnerability in the url parameter of the readRawText function of the HTTP Request Handler component...

PbootCMS Cross-Site Scripting Vulnerability

PbootCMS is a PbootCMS personal developer of an open source enterprise website content management system CMS developed using the PHP language. A cross-site scripting vulnerability exists in PbootCMS version 3.2.5-20230421, which stems from the presence of an unknown function in the system that...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference flaw found in the hugetlbfsfillsuper function...

WordPress plugin PDF Invoices & Packing Slips for WooCommerce SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is an application plugin. WordPress plugin PDF Invoices &...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A command execution vulnerability exists in versions of Ffmpeg prior to n6.1, which can be exploited by an attacker to execute arbitrary commands on a system...

Quarkus Security Vulnerabilities

Quarkus is a cloud-native Linux container-first framework for writing Java applications. A security vulnerability exists in Quarkus that stems from the presence of a deserialization vulnerability...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line cherub-hair mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

SvelteKit Input Validation Error Vulnerability

SvelteKit is an open source web development framework from Svelte. SvelteKit has an input validation error vulnerability that stems from the fact that sending a GET or HEAD request can cause the application to crash...

Number withdrawn

ROS2 Foxy Fitzroy is an application of the ROS2 organization. This CVE number has been withdrawn...

Ghost Security Breach

Ghost CMS is an open source headless content management system CMS written in JavaScript from the Ghost Foundation in Singapore. A security vulnerability exists in Ghost versions prior to 5.76.0. An attacker exploited the vulnerability to perform cross-site scripting attacks...