Palo Alto Networks GlobalProtect 安全漏洞

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides features such as firewall monitoring and threat prevention. A security vulnerability exists in Palo Alto Networks GlobalProtect versions prior to 6.1.1 windows, prior to...

CVE-2023-3005

A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=savearea of the component POST Parameter Handler. The manipulation of the argument area with the inp...

CVE-2023-3005 SourceCodester Local Service Search Engine Management System POST Parameter cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=savearea of the component POST Parameter Handler. The manipulation of the argument area with the inp...

CVE-2023-3005

The CVE-2023-3005 issue affects SourceCodester Local Service Search Engine Management System 1.0. A cross-site scripting vulnerability exists in the POST Parameter Handler for /admin/ajax.php?action=save_area, where the area parameter is vulnerable to injected input (e.g., ). Exploitation can be ...

CVE-2023-3005 SourceCodester Local Service Search Engine Management System POST Parameter cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=savearea of the component POST Parameter Handler. The manipulation of the argument area with the inp...

CVE-2023-1383

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with Fire...

CVE-2023-1383

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with Fire...

UBUNTU-CVE-2023-1450

A vulnerability was found in MP4v2 2.1.2 and classified as problematic. This issue affects the function DumpTrack of the file mp4trackdump.cpp. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The...

SUSE CVE-2020-14312

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option local-service is not...

CVE-2022-38680

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-46732

Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status...

CVE-2022-46732

Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status...

Authentication flaw

Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status...

Proficy Historian 访问控制错误漏洞

GE Digital Proficy Historian is a powerful tool with storage analysis and data collection capabilities from GE Digital. An access control error vulnerability exists in Proficy Historian v7.1 and prior versions, which stems from the fact that even if authentication to a local service fails,...

CVE-2022-46732 CVE-2022-46732

Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status...

CVE-2022-46732 CVE-2022-46732

Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status...

CVE-2022-42780

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services...

UNISOC chipset 输入验证错误漏洞

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset due to a lack of bounds checking in its wlan driver, resulting in a local denial of service for the wlan service...

Siemens syngo Dynamics server-side request forgery vulnerability

Siemens syngo Dynamics is a cardiovascular imaging and information solution from Siemens, Germany. Designed to be a centralized digital hub for complete cardiovascular services, Siemens syngo Dynamics is vulnerable to server-side request forgery, which can be exploited by attackers to cause NTLM ...

CVE-2022-42894

A vulnerability has been identified in syngo Dynamics All versions VA40G HF01. An unauthenticated Server-Side Request Forgery SSRF vulnerability was identified in one of the web services exposed on the syngo Dynamics application that could allow for the leaking of NTLM credentials as well as loca...