Design/Logic Flaw

On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent referred to as the TerminAttr agent is enabl...

Imperva Unveils Latest API Security Enhancements

Imperva is continuing to evolve its API Security offering to help customers better protect their APIs, wherever they are, and to meet changing market requirements. Since launching API Security in March 2022, we continued investing in our API Security offering with the goal of simplifying the...

Odoo 安全漏洞

Odoo is a set of enterprise resource planning ERP and customer relationship management CRM system from Odoo Belgium. The system is developed in Python, with PostgreSQL as the database, and includes modules for sales management, inventory management, and financial management. A security...

Design/Logic Flaw

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the...

Design/Logic Flaw

An issue was discovered in Telindus Apsal 3.14.2022.235 b. Unauthorized actions that could modify the application behaviour may not be blocked...

Design/Logic Flaw

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRETKEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset...

Design/Logic Flaw

Ribose RNP before 0.16.3 may hang when the input is malformed...

Design/Logic Flaw

Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use...

Design/Logic Flaw

A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of t...

Design/Logic Flaw

An issue was discovered in drivers/media/dvb-core/dvbfrontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASKRUNNING. In dvbfrontendgetevent, waiteventinterruptible is called; the condition is dvbfrontendtesteventfepriv,events. In dvbfrontendtestevent,...

White Rabbit Switch 安全漏洞

The White Rabbit Switch WRS is an open hardware design from the OPEN HARDWARE organization. A security vulnerability exists in White Rabbit Switch. An attacker exploiting this vulnerability could retrieve sensitive information such as password hashes and SNMP community strings...

CVE-2022-47435

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Olive Design WP-OliveCart plugin = 1.1.3 versions...

CVE-2022-47435

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Olive Design WP-OliveCart plugin = 1.1.3 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Olive Design WP-OliveCart plugin = 1.1.3 versions...

CVE-2022-47435

CVE-2022-47435 affects WordPress plugin WP-OliveCart (Olive Design) ≤ 1.1.3. The flaw is a Stored XSS requiring admin privileges (admin+) and user interaction, with network attack vector and changed scope. Root cause per sources is inadequate sanitization/escaping of settings, enabling admins to ...

PT-2023-15311

Name of the Vulnerable Software and Affected Versions Olive Design WP-OliveCart plugin versions prior to 1.1.4 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. Recommendations For Olive Design WP-OliveCart plugin...

CVE-2022-47435: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Olive Design WP-OliveCart plugin = 1.1.3 versions...

Design/Logic Flaw

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

Design/Logic Flaw

Datakit CrossCadWarex64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information...

Design/Logic Flaw

Datakit CrossCadWarex64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information...