Gallagher Command Centre Cross-Site Scripting Vulnerability

Gallagher Command Centre is a centralized control tool for Gallagher access control systems from Gallagher New Zealand. A security vulnerability exists in Gallagher Command Centre due to improper neutralization of special elements. The following products and versions are affected: Gallagher Comma...

PT-2024-21975 · Dotclear · Dotclear

Name of the Vulnerable Software and Affected Versions: Dotclear version 2.29 Description: A Reflected Cross-Site Scripting XSS issue has been identified in the Search functionality of the Admin Panel. Recommendations: For Dotclear version 2.29, consider disabling the Search functionality within t...

PortlandLabs Concrete CMS Cross-Site Scripting Vulnerability

PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. in the United States. A cross-site scripting vulnerability exists in PortlandLabs Concrete CMS versions prior to 9.2.7, which stems from insufficient validation of data provided by the...

The vulnerability of the access control list mechanism in the Cisco NX-OS operating system for Cisco Nexus 3000 and Nexus 9000 switches allows a perpetrator to gain access to network resources.

The vulnerability of the access control list mechanism in the Cisco NX-OS operating system for Cisco Nexus 3000 and Nexus 9000 switches is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to network resources remotely...

VulnCheck KEV: CVE-2021-32849

Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds...

CVE-2024-25016

IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a denial of service due to incorrect buffering logic. IBM X-Force ID: 281279...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, SMS alerts, and product image zoom, among other features. A security vulnerability previously existed in PrestaShop Account Manager - Sales Representative &...

Linux kernel security vulnerabilities

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. The Linux kernel suffers from a security vulnerability that arises from the fact that dh-dccphx is the 9th byte offset 8 of "struct dccphdr" instead of the 7th byte...

OpenBSD Security Vulnerabilities

OpenBSD is a cross-platform, BSD-based, UNIX-like operating system from the Canadian OpenBSD project group. A security vulnerability exists in versions prior to OpenBSD 7.4 errata 009, which stems from pf4 A race condition between packet processing and packet state expiration may cause a kernel...

CVE-2024-23488

creationtimestamp| type| source ---|---|--- 2024-02-29 09:26:54+00:00| seen| https://t.me/ctinow/196386 2024-02-29 09:31:45+00:00| seen| https://t.me/ctinow/196410...

CVE-2024-24147

creationtimestamp| type| source ---|---|--- 2024-02-29 02:56:31+00:00| seen| https://t.me/ctinow/196115 2024-02-29 03:03:03+00:00| seen| https://t.me/ctinow/196132 2024-03-12 18:16:53+00:00| seen| https://t.me/ctinow/205952...

CVE-2024-0602

The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2024-18447 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 8.1.x through 8.1.8 Mattermost versions 9.2.x through 9.2.4 Mattermost version 9.3.0 Mattermost versions 9.4.x through 9.4.1 Description: The issue allows an authenticated attacker to cause the server to run out of memory...

PT-2024-2031 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions prior to v8.1.9 Description: The issue is related to uncontrolled resource consumption. An attacker can exploit this by setting a custom user status with an emoji value as a very long string, causing high resource...

Mattermost Security Vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost versions 8.1.x through prior to 8.1.9, 9.2.x through prior to 9.2.5, and 9.3.0, which stems from an inability to clean up metadata on posts containing...

Mattermost Security Vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost versions prior to 9.4.2 and prior to 8.1.9 that stems from the presence of a file access restriction bypass vulnerability...

PT-2024-20624 · Unknown · Smartypants Sp Project & Document Manager

Name of the Vulnerable Software and Affected Versions: Smartypants SP Project & Document Manager versions 4.69 and earlier Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This allows for...

PT-2024-1909 · Cisco · Cisco Nexus 3000 Series Switches +2

Name of the Vulnerable Software and Affected Versions: Cisco Nexus 3000 and 9000 Series Switches affected versions not specified Description: A vulnerability in the access control list ACL programming for port channel subinterfaces could allow an unauthenticated, remote attacker to send traffic...

bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

Processing specially crafted responses coming from DNSSEC-signed zones can lead to uncontrolled CPU usage, leading to a Denial of Service in the DNSSEC-validating resolver side. This vulnerability applies only for systems where DNSSEC validation is enabled...

bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host. This vulnerability applies only for systems where DNSSE...