CVE-2024-27941

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.5. The affected client systems do not properly sanitize input data before sending it to the SQL server. An attacker could use this vulnerability to compromise the whole database...

CVE-2023-50364

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS...

PT-2024-7005

Name of the Vulnerable Software and Affected Versions Grafana versions prior to v11.0.6+security-01 Grafana versions prior to v11.1.7+security-01 Grafana versions prior to v11.2.2+security-01 Description The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queri...

CVE-2024-32580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Averta Master Slider allows Stored XSS.This issue affects Master Slider: from n/a through 3.9.8...

CVE-2024-21048

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: XML input. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web...

CVE-2024-21598

CVE-2024-21598 affects Juniper Networks Junos OS and Junos OS Evolved, where the Routing Protocol Daemon (rpd) crashes and restarts when receiving a BGP update containing a malformed TLV in a tunnel encapsulation attribute. This is due to improper validation of syntactic correctness of input. Imp...

Genesis Blocks < 3.1.3 - Contributor+ Stored XSS

Description The plugin does not properly escape data input provided to some of its blocks, allowing using with at least contributor privileges to conduct Stored XSS attacks. PoC As a contributor, put the below code in a post while in Code Editor mode The XSS will be triggered when...

CVE-2023-32260

CVE-2023-32260 describes a Misinterpretation of Input vulnerability affecting OpenText SMAX, AMX, and HCMX. Affected: SMAX versions 2020.05–2023.05; AMX versions 2021.08–2023.05; HCMX versions 2020.05–2023.05. Root cause: misinterpretation of input data leading to input data manipulation. Impact ...

BIT-TENSORFLOW-2022-35995 `CHECK` fail in `AudioSummaryV2` in TensorFlow

TensorFlow is an open source platform for machine learning. When AudioSummaryV2 receives an input samplerate with more than one element, it gives a CHECK fails that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

USN-6674-2 python-django vulnerability

USN-6674-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Seokchan Yoon discovered that the Django Truncator function incorrectly handled very long HTML input. A remote attacker could possibly use this issue to cause...

The vulnerability of the `udp_input()` function in the `src/udp.c` component of the TCP-IP Libslirp emulator allows a attacker to access confidential data.

The vulnerability of the udpinput function in the src/udp.c component of the TCP-IP Libslirp emulator relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

CVE-2024-24807

CVE-2024-24807 — Sulu HTML Injection via Autocomplete Suggestion What is affected: Sulu CMS (PHP, Symfony) — specifically the auto-complete form used when creating Tag names. Root cause: HTML input in Tag name is executed when listed in the autocomplete, indicating inadequate input sanitization f...

CVE-2023-45035

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

CVE-2023-45036

CVE-2023-45036 affects QNAP QTS/QTS Hero/QuTScloud. A buffer copy without checking input size could allow an authenticated administrator to execute code over the network. Remediations are in place: QTS 5.1.3.2578/build 20231110 and later; QuTS hero h5.1.3.2578/build 20231110 and later; QuTScloud ...

CVE-2023-41292

CVE-2023-41292 concerns a buffer copy without input size validation in QNAP firmware. The issue can allow authenticated administrators to execute code over the network. Affected products include QTS, QuTS hero, and QuTScloud, with root cause described as a buffer overrun during input handling. Im...

CVE-2023-41279

CVE-2023-41279 affects QNAP QTS/QTS Hero/QuTScloud. It is described as a stack/_buffer type issue where a buffer copy without input size checking could allow an authenticated administrator to execute code over the network. Fixed versions are QTS 5.1.2.2533 build 20230926 and later, QuTS Hero h5.1...

CVE-2024-1024

A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnerability affects unknown code of the component New Account Handler. The manipulation of the argument First Name/Last Name with the input alert1 leads to cross site scripting. The...

CVE-2024-23866 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/countrycreate.php, in the countryid parameter. Exploitation of this vulnerability...

Kashipara Food Management System Cross-Site Scripting Vulnerability

Kashipara Food Management System is a food management system from Kashipara. A cross-site scripting vulnerability exists in version 1.0 of the Kashipara Food Management System, which stems from a lack of effective filtering and escaping of user-supplied data in the parameter tin of the...

CVE-2023-45041

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...