213 matches found
Symantec Messaging Gateway Security Vulnerability
Symantec Messaging Gateway is a suite of spam filters from Symantec USA. The product features anti-spam, anti-virus, advanced content filtering, and data leakage protection. A security vulnerability exists in Symantec Messaging Gateway version 9.5 and earlier. A remote anonymous attacker can...
PT-2023-31081 · Unknown · Teachpress
Name of the Vulnerable Software and Affected Versions: teachPress versions n/a through 9.0.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the us...
Codecanyon Crypto Currency Tracker 安全漏洞
Codecanyon Crypto Currency Tracker is a cryptocurrency tracker from the US company Codecanyon. A security vulnerability exists in Codecanyon Crypto Currency Tracker 9.5 and earlier versions that stems from the ability to create an administrator account without authentication...
CVE-2023-34798
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-34798
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file...
Weaver E-Office 代码问题漏洞
Weaver E-Office is a collaborative office system from China's Panavision Technologies Weaver. A security vulnerability exists in weaver e-office versions prior to v9.5. The vulnerability stems from the presence of an arbitrary file upload vulnerability, which allows an attacker to execute arbitra...
GLPI 安全漏洞
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...
PT-2023-23756 · Apple · Ipados +5
Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 16.5 Apple iPadOS versions prior to 16.5 Apple watchOS versions prior to 9.5 Apple tvOS versions prior to 16.5 Apple macOS Ventura versions prior to 13.4 Description: An out-of-bounds read issue was addressed with...
Apple watchOS 安全漏洞
Apple watchOS is a smartwatch operating system from Apple. A security vulnerability exists in Apple watchOS version 9.5, which stems from the fact that an attacker with physical access to a locked Apple Watch may be able to view a user's photos or contacts via assistive features...
PT-2023-23767 · Apple · Macos Ventura +5
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.5 iPadOS versions prior to 16.5 watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 Description: The issue allows an app to potentially disclose kernel memory due to inadequa...
PT-2023-3646 · Apple · Ios +3
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 iOS versions prior to 16.5 iPadOS versions prior to 16.5 Description: The issue is related to an out-of-bounds read in the kernel memory, which can be exploited by an app to disclose...
Weaver E-Office 安全漏洞
Weaver E-Office is a collaborative office system from China's PanWei Technologies Weaver. A security vulnerability exists in Weaver E-Office version 9.5 and earlier versions, which is caused by an incorrect operation of the parameter url that results in absolute path traversal...
Weaver E-Office 安全漏洞
Weaver E-Office is a collaborative office system from China's Panavision Technologies Weaver. A security vulnerability exists in Weaver E-Office version 9.5. An attacker can exploit the vulnerability to access files or directories...
Weaver E-Office 命令注入漏洞
Weaver E-Office is a collaborative office system from China's Panavision Technologies Weaver. A command injection vulnerability exists in Weaver E-Office version 9.5, which stems from a problem in the file /webroot/inc/utilityall.php that can lead to command injection...
GLPI 跨站脚本漏洞
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...
SUSE CVE-2013-2724
Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors...
Mitel MiCollab 安全漏洞
Mitel MiCollab is a mobile application that provides voice, video, messaging, audio conferencing and team collaboration for employees from Mitel Canada. A security vulnerability exists in Mitel MiCollab version 9.5.0.101 and prior versions, which stems from an incorrect authorization control in t...
USN-5676-1 postgresql-9.5 vulnerability
Alexander Lakhin discovered that PostgreSQL incorrectly handled the security restricted operation sandbox when a privileged user is maintaining another user’s objects. An attacker having permission to create non-temp objects can use this issue to execute arbitrary commands as the superuser...
HCL BigFix Platform 安全漏洞
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform versions 9.5 to 9.5.19,...