KDDI HOME SPOT CUBE2 Security Vulnerability

KDDI HOME SPOT CUBE2 is a home wireless router from KDDI Japan. A security vulnerability exists in KDDI HOME SPOT CUBE2 version V102 and prior versions. An attacker can exploit the vulnerability to remotely execute code...

BuildKit 路径遍历漏洞

BuildKit is concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit. A path traversal vulnerability exists in BuildKit version v0.12.4 and earlier. An attacker can exploit this vulnerability to remove files external to the container from the host system...

WordPress plugin WPZOOM Shortcodes Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7

The Mozilla Foundation Security Advisory describes this flaw as: Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

Sharp JH-RV11 Security Vulnerability

Sharp JH-RV11 is an energy management controller for cloud services from Sharp Japan. A security vulnerability exists in Sharp JH-RV11 Ver.B0.1.9.1 version and earlier versions. An attacker could exploit the vulnerability to perform a cross-site scripting attack...

Qiyu iFair Security Breach

Qiyu iFair is a business management software from Qiyu Inc. A security vulnerability exists in Qiyu iFair version 23.8ad0 and prior versions. A remote attacker can exploit this vulnerability to obtain sensitive information via the uploadimage component...

PT-2024-14949 · WordPress · Wordpress Toolbar

Name of the Vulnerable Software and Affected Versions: WordPress Toolbar WordPress plugin versions 2.2.6 and earlier Description: The issue allows unauthenticated attackers to redirect users to potentially malicious sites by tricking them into performing an action. This is achieved via the wptbto...

CVE-2023-29081

A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service DoS condition when handling move operations on local, temporary folders...

PT-2024-40943 · Unknown +1 · Conrod Core +1

Name of the Vulnerable Software and Affected Versions: conrod versions 0.62.0 and earlier Description: The issue concerns the conrod crate, which has been deprecated since version 0.62.0. Its functionality was split across multiple crates, with core functionality transferred to conrod core. If...

CVE-2023-33760

SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow attackers to eavesdrop on communications via a man-in-the-middle attack...

PT-2024-12440 · Splicecom · Splicecom Maximiser Soft Pbx

Name of the Vulnerable Software and Affected Versions: SpliceCom Maximiser Soft PBX versions 1.5 and before Description: The issue allows attackers to bypass authentication via a brute force attack due to the lack of restriction on excessive authentication attempts. Recommendations: For SpliceCom...

PT-2024-19970 · Symantec · Symantec Messaging Gateway

Name of the Vulnerable Software and Affected Versions: Symantec Messaging Gateway versions 10.5 and before Description: A buffer overflow vulnerability exists, allowing a remote, anonymous attacker to achieve remote code execution as root. Recommendations: For Symantec Messaging Gateway versions...

PT-2024-12439 · Splicecom · Splicecom Maximiser Soft Pbx

Name of the Vulnerable Software and Affected Versions: Splicecom Maximiser Soft PBX versions 1.5 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the CLIENT NAME and DEVICE GUID fields in the login component...

Splashtop Software Updater Security Vulnerability

Splashtop Software Updater is a software update application for Splashtop products from Splashtop USA. Splashtop Software Updater 1.5.6.21 and prior versions are affected by a security vulnerability that originates from allowing a local, unprivileged attacker to elevate system-level privileges an...

WordPress plugin IP2Location Country Blocker Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. An information disclosure vulnerability exists in the...

PT-2024-19305 · Unknown · Asgaros Forum

Name of the Vulnerable Software and Affected Versions: Asgaros Forum versions 2.7.2 and earlier Description: The issue is related to the deserialization of untrusted data, which can lead to potential security risks. There is no information provided about the estimated number of potentially affect...

Anomali Match Security Vulnerability

Anomali Match is a big data security analytics engine from Anomali that automates threat detection, investigation and response. A security vulnerability exists in Anomali Match version 4.6.2 and prior versions, which stems from mishandling of untrusted input and could lead to an operating system...

CVE-2023-51463

Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

UBUNTU-CVE-2024-20976

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2024-11653 · Vinoj Cardoza · 3D Tag Cloud

Name of the Vulnerable Software and Affected Versions: Vinoj Cardoza 3D Tag Cloud versions 3.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...