9327 matches found
DEBIAN-CVE-2023-29580
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasmexprcreate at /libyasm/expr.c...
UBUNTU-CVE-2023-29580
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasmexprcreate at /libyasm/expr.c...
PT-2023-22320 · Yasm +1 · Yasm +1
Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0.55.g101bc Description: A segmentation violation was discovered in yasm via the component yasm expr create at /libyasm/expr.c. Recommendations: For yasm version 1.3.0.55.g101bc, consider restricting access to the yasm expr...
Cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Employee Payslip Generator 1.0. Affected is an unknown function of the file /classes/Master.php?f=saveposition of the component Create News Handler. The manipulation of the argument name with the input alertdocument.cookie...
CVE-2023-1796 SourceCodester Employee Payslip Generator Create News cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Employee Payslip Generator 1.0. Affected is an unknown function of the file /classes/Master.php?f=saveposition of the component Create News Handler. The manipulation of the argument name with the input alertdocument.cookie...
PT-2025-43097
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the qla2xxx driver within the Linux kernel, specifically within the qla2x00 probe one function. The issue occurs during adapter initialization when the ba...
SourceCodester Employee Paycheck Generator Cross-site Script Vulnerability
Employee Payslip Generator is an employee payslip generator by Carlo Montero Personal Developer. A security vulnerability exists in SourceCodester Employee Payslip Generator version 1.0, which originates from an unknown function in the file /classes/Master.php?f=saveposition of the component Crea...
CVE-2023-1796: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in SourceCodester Employee Payslip Generator 1.0. Affected is an unknown function of the file /classes/Master.php?f=saveposition of the component Create News Handler. The manipulation of the argument name with the input leads to cross site...
CVE-2023-26968
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload...
Unrestricted file upload
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload...
CVE-2023-26982
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function...
Cross site scripting
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function...
Security Bulletin: There is a security vulnerability in Node.js create-choo-electron module used by IBM Maximo for Civil Infrastructure in Maximo Application Suite (CVE-2022-25908)
Summary There is a security vulnerability in Node.js create-choo-electron module used by IBM Maximo for Civil Infrastructure in Maximo Application Suite. Vulnerability Details CVEID:CVE-2022-25908 DESCRIPTION: Node.js create-choo-electron module could allow a remote attacker to execute arbitrary...
CVE-2023-26982
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function...
CVE-2023-26968
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload...
CVE-2023-26968
CVE-2023-26968 affects Atrocore 1.5.25: the Create Import Feed option with the glyphicon-glyphicon-paperclip function is vulnerable to unauthenticated file upload. CVSS v3.1 shows/quotes a Critical rating (9.8) with Network access, no privileges, no user interaction required, and high impact to c...
PT-2023-20879 · Atrocore · Atrocore
Name of the Vulnerable Software and Affected Versions: Atrocore version 1.5.25 Description: The Create Import Feed option with the glyphicon-glyphicon-paperclip function in Atrocore is vulnerable to unauthenticated file upload. This issue allows unauthorized users to upload files without proper...
CVE-2023-26968: Unrestricted Upload of File with Dangerous Type
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload...
PT-2023-20887 · Trudesk · Trudesk
Name of the Vulnerable Software and Affected Versions: Trudesk version 1.2.6 Description: The issue is a stored cross-site scripting XSS vulnerability. It occurs via the Add Tags parameter under the Create Ticket function. This allows for potential malicious script execution when a user interacts...