PT-2023-3690 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions 2018u17 and earlier Adobe ColdFusion versions 2021u7 and earlier Adobe ColdFusion versions 2023u1 and earlier Description: The issue is related to a Deserialization of Untrusted Data vulnerability in Adobe ColdFusion...

ELECOM WRC 安全漏洞

The ELECOM WRC is a home-ready network camera from ELECOM Japan. A security vulnerability exists in ELECOM WRC-1167FEBK-A v1.18 and earlier versions, which stems from the presence of an information disclosure that could allow network-adjacent attackers with access to the affected product to...

Wordpress Plugin HT Feed 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

TravianZ 跨站脚本漏洞

TravianZ is a free-to-play in-browser web strategy game from Travian, a German company. A security vulnerability exists in TravianZ version 8.3.4 and earlier, which stems from a cross-site scripting XSS vulnerability in multiple endpoints...

PT-2023-22851 · Unknown · Lsoitemdata

Name of the Vulnerable Software and Affected Versions: LSOItemData versions prior to SMR Jul-2023 Release 1 Description: The issue is related to improper input validation in LSOItemData, allowing attackers to launch certain activities. Recommendations: For versions prior to SMR Jul-2023 Release 1...

UBUNTU-CVE-2023-37209

A use-after-free condition existed in NotifyOnHistoryReload where a LoadingSessionHistoryEntry object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the reference to that object was later reused. This vulnerability affects Firefox 115...

UBUNTU-CVE-2023-37208

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13...

PT-2023-22587

Name of the Vulnerable Software and Affected Versions Kodi Home Theater Software versions 19.5 and earlier Description A divide by zero issue in Kodi Home Theater Software allows attackers to cause a denial of service via the use of a crafted mp3 file. Recommendations For versions 19.5 and earlie...

PT-2023-24973 · Taocms · Taocms

Name of the Vulnerable Software and Affected Versions: taocms versions 3.0.2 and earlier Description: The issue is related to Cross Site Scripting XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PT-2023-21975 · Frauscher Sensortechnik Gmbh · Fds001

Name of the Vulnerable Software and Affected Versions: Frauscher Sensortechnik GmbH FDS001 for FAdC/FAdCi versions 1.3.3 and earlier Description: The issue allows a remote attacker to read all files on the filesystem of the FDS001 device through a path traversal vulnerability of the web interface...

CVE-2023-28323

A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS Operating System vulnerabilities to escalate privileges on the machine or be used as a...

WordPress Plugin Flyn San IFrame Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin MStore API SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

DEBIAN-CVE-2023-32435

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have...

WordPress plugin CRM Memberships 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress plugin SMTP2GO – Email Made Easy 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

CVE-2023-34600

Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection...

CVE-2023-32209

A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox 113...

NocoDB 路径遍历漏洞

NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb into a smart spreadsheet. A security vulnerability exists in NocoDB version 0.106.0 and earlier versions. An attacker can exploit the vulnerability to access arbitrary files on the server...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A security vulnerability exists in PublicCMS V4.0.202302 and earlier versions, which stems from vulnerability to unsecured privileges...