15633 matches found
Cross-Site Scripting (XSS)
govuktechdocs is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of sanitization in html "snippet" elements indexed in the search, which allows an attacker to inject and execute arbitrary JavaScript into the browser...
CVE-2023-20852
aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ interpreter. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service...
Rails 安全漏洞
Rails is a set of open source web application frameworks based on the Ruby language by the American Rails team. A security vulnerability exists in versions prior to Rails v6.1.7.3, which stems from insufficient cleansing of user-supplied data, that could allow a remote attacker to trick a victim...
CVE-2023-20852 aEnrich a+HRD - Deserialization of Untrusted Data
aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ interpreter. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service...
UBUNTU-CVE-2021-44547
A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege escalation...
emacs: command injection vulnerability in org-mode
A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the function org-babel-execute:latex in ob-latex.el can result in arbitrary command execution...
CVE-2023-25313
OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature...
CVE-2023-22581
White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application the default installation makes the webserver run as the root user...
Fedora 36 : ffmpeg (2023-1e24db98a6)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-1e24db98a6 advisory. New release with bug fixes across the tree Contains security fixes for CVE-2022-48434 and CVE-2022-3109. Tenable has extracted the preceding...
The vulnerability of Google Chrome’s Skia library allows a hacker to escape from the isolated software environment and execute arbitrary code.
The vulnerability of Google Chrome’s Skia library is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to escape from a isolated software environment and execute arbitrary code...
Deserialization of untrusted data
VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root...
Arbitrary Code Injection
Apache OpenOffice is vulnerable to Arbitrary Code Injection. The vulnerability exists because the Java class path is not properly configured which allows an attacker to inject and execute arbitrary codes...
CVE-2023-29410
A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute...
Path traversal
A CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker with a local privileged account to place a specially crafted file on the target machine, which may give the attacker the ability to execute arbitrary code during the installation process initiated by a...
Advisory ROSA-SA-2023-2156
Software: zlib 1.2.11 OS: ROSA Virtualization 2.1 packageevrstring: 1.2.11 CVE-ID: CVE-2018-25032 BDU-ID: 2022-01641 CVE-Crit: HIGH CVE-DESC: A vulnerability in the zlib library is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an...
PT-2023-22780 · Archery · Archery
Name of the Vulnerable Software and Affected Versions: Archery affected versions not specified Description: The Archery project contains multiple SQL injection vulnerabilities that may allow an attacker to query the connected databases. User input coming from the db name parameter value and the...
Tailor Management System SQL Injection Vulnerability (CNVD-2023-29360)
Tailor Management System is a tailor store management system. Tailor Management System version 1.0 is vulnerable to SQL injection, which can be exploited by remote authenticated attackers to execute arbitrary code...
Juniper Networks Junos OS Evolved 操作系统命令注入漏洞
Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. Juniper Networks Junos OS Evolved suffers from an operating system command injection vulnerability that stems from the presence of an operating system command injection vulnerability that can be exploited by a...
Adobe Substance 3D Stager Resource Management Error Vulnerability
Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A resource management error vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...