4373 matches found
Keyence KV STUDIO和Keyence KV REPLAY VIEWER 安全漏洞
Keyence KV STUDIO and Keyence KV REPLAY VIEWER are both products of Keyence Corporation of China.Keyence KV STUDIO is a PLC programming software.Keyence KV REPLAY VIEWER is a computer program. A security vulnerability exists in Keyence KV STUDIO version 11.64 and earlier, and Keyence KV REPLAY...
PT-2024-21236 · Dell · Dell Openmanage Enterprise
Name of the Vulnerable Software and Affected Versions: Dell OpenManage Enterprise versions 4.0 and prior Description: The issue allows an unauthenticated remote attacker to potentially exploit a path traversal vulnerability, gaining unauthorized access to files stored on the server filesystem wit...
Insurance Management System 安全漏洞
Insurance Management System is an insurance management system by the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the Last Name field...
Insurance Management System 安全漏洞
Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions that stems from a cross-site scripting XSS vulnerability in the City field...
Insurance Management System 安全漏洞
Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the Email field...
PT-2024-23744
Name of the Vulnerable Software and Affected Versions Insurance Mangement System versions 1.0.0 and earlier Description The issue allows a remote attacker to execute arbitrary code via the First Name input field. This is a Cross Site Scripting vulnerability. Recommendations For versions 1.0.0 and...
MediaWiki 安全漏洞
MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.39.3 and earlier versions, which stems fro...
PT-2024-19916 · Cincopa · Cincopa Post Video Players
Name of the Vulnerable Software and Affected Versions: Cincopa Post Video Players versions 1.159 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Cincopa Post Video Players. This issue allows for malicious requests to be made on behalf of the user without their knowledge o...
PT-2024-23269 · Unknown · Wholesalex
Name of the Vulnerable Software and Affected Versions: WholesaleX versions 1.3.2 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security risks, as deserializing untrusted data can allow an attacker to execute malicious code. No...
PT-2024-13516 · Unknown · Terry Lin Wp Githuber Md
Name of the Vulnerable Software and Affected Versions: Terry Lin WP Githuber MD versions 1.16.2 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which can be exploited. No information is provided about the estimated number of potentially affecte...
Devolutions Server 安全漏洞
Devolutions Server is an application from Devolutions Canada. provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.1.6 and prior versions that stems from improper access control...
CVE-2024-42950
Notes Author| Note ---|--- jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQwebkit webkit in Ubuntu uses the JavaScriptCore JSC engine, not V8 mdeslaur | It is no longer possible to build new webkit2gtk versions on focal and earlier. Marking as...
PT-2024-20567 · Woocommerce · Woocommerce Box Office
Name of the Vulnerable Software and Affected Versions: WooCommerce Box Office versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in WooCommerce Box Office. Recommendations: For versions 1.2.2 and earlier, update to a version that contains a fix f...
thi.ng paths 安全漏洞
thi.ng paths is a path-based object property/array accessor with struct-shared immutable, optimized and optional types. A security vulnerability exists in thi.ng paths version v.5.1.62 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary code via the mutIn and...
PT-2024-12043 · Codepeople · Codepeople Google Maps Cp
Name of the Vulnerable Software and Affected Versions: CodePeople Google Maps CP versions 1.0.43 and earlier Description: The issue is related to a Missing Authorization vulnerability in CodePeople Google Maps CP. This vulnerability affects the software by not properly checking authorization,...
PT-2024-22462 · Unknown · Niushop B2B2C
Name of the Vulnerable Software and Affected Versions: Niushop B2B2C versions 5.3.3 and earlier Description: A SQL injection issue allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component. The vulnerability is critical and can be exploited to gain...
Easyadmin 代码问题漏洞
Easyadmin is a simple, lightweight backend management system scaffolding by laker personal developer. A code issue vulnerability exists in EasyAdmin version 20240315 and prior versions. An attacker could exploit this vulnerability to perform a server-side request forgery attack...
PT-2024-14232 · Unknown · Funnelkit Checkout
Name of the Vulnerable Software and Affected Versions: FunnelKit Checkout versions 3.10.3 and earlier Description: A Missing Authorization issue affects the software, potentially allowing unauthorized access. The estimated number of affected devices is not specified. There is no information about...
PT-2024-22169 · Zippy · Zippy
Name of the Vulnerable Software and Affected Versions: Zippy versions 1.6.9 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability. This allows for the upload of files with potentially dangerous types, which could lead to security issues...