PT-2024-40098 · Adobe · Magento Open Source +1

Name of the Vulnerable Software and Affected Versions: Magento Commerce and Open Source versions prior to 2.2.5 Magento Commerce and Open Source versions prior to 2.1.14 Description: The issue concerns remote code execution RCE, Cross-Site Scripting XSS, and other security problems...

Unspecified Vulnerability in Mozilla Firefox (CNVD-2024-23333)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox has a security vulnerability that can be exploited by attackers to obtain predictable values...

Mozilla Firefox Code Execution Vulnerability (CNVD-2024-23338)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A code execution vulnerability exists in Mozilla Firefox, which can be exploited by attackers to execute arbitrary code or cause a denial of service on a vulnerable system...

PT-2024-40249 · Jquery Foundation +1 · Jquery +2

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions 1.9.0.0 through 1.14.4.0 Magento Open Source versions 1.5.0.0 through 1.9.4.0 Description: The issue concerns multiple vulnerabilities in Magento, including remote code execution RCE, cross-site scripting XSS, and...

PT-2024-40137 · Adobe · Magento Open Source +1

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions prior to 1.14.4.0 Magento Open Source versions prior to 1.9.4.0 Description: The issue concerns remote code execution RCE, cross-site scripting XSS, and cross-site request forgery CSRF among other vulnerabilities...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2024-23336)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of e-mail client software that is separate from the Mozilla Application Suite. Mozilla Thunderbird is ...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2024-23348)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions due to a window being disabled even after the file dialog box is displayed...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2024-23346)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by an attacker to bypass security restrictions by bypassing the move semantics of one of the data members...

Bonitasoft security vulnerabilities

Bonitasoft is an open source BPM software from Bonitasoft. Bonitasoft has a security vulnerability that stems from a lack of dynamic permissions, which leads to an IDOR vulnerability...

CVE-2024-34352

1Panel is an open source Linux server operation and maintenance management panel. Prior to v1.10.3-lts, there are many command injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. The mirror configuration write symbol...

CVE-2024-34070

Froxlor is open source server administration software. Prior to 2.1.9, a Stored Blind Cross-Site Scripting XSS vulnerability was identified in the Failed Login Attempts Logging Feature of the Froxlor Application. An unauthenticated User can inject malicious scripts in the loginname parameter on t...

CVE-2024-33250

An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268Leo and SRS/4.0.195Leo allows a remote attacker to execute arbitrary code via a crafted request...

CVE-2024-32669

Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. However, it occurs in the test code and does not include in the release. This issue affects escargot: 4.0.0...

CVE-2024-3579

The open-source project Online Shopping System Advanced is vulnerable to Reflected Cross-Site Scripting (XSS) . This vulnerability stems from the improper neutralization of input during web page generation, allowing an attacker to trick a user into using a crafted URL . If clicked, the URL causes...

DataEase security vulnerabilities

DataEase is an open source data visualization and analysis tool. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. DataEase v1.18.19 before the version of a security vulnerability , the vulnerability stems from ClickHous...

SaaS Starter: Data Forgery Vulnerability

SaaS Starter is an open source, fast and freely hosted SaaS template/sample from Critical Moments Open Source. A data forgery issue vulnerability exists in SaaS Starter that stems from a user JWT token not being validated on the server session...

ZKsync Era security vulnerabilities

ZKsync Era is an open source compiler from Matter Labs. A security vulnerability exists in ZKsync Era versions prior to 1.4.1, which stems from a conversion error...

micromatch security vulnerability

micromatch is a highly optimized wildcard and global matching library from the micromatch open source. A security vulnerability exists in micromatch that stems from an inability to limit the number of characters that can be processed, which could lead to memory exhaustion...

Open Source Clinic Management System code-related vulnerabilities

BigProf Online Clinic Management System is an online clinic management system from BigProf, Inc. A code issue vulnerability exists in Open Source Clinic Management System version 1.0, which stems from the parameter logo in the file setting.php that can lead to unrestricted uploads...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A denial of service vulnerability exists in Mozilla Firefox, which can be exploited by attackers to cause the browser to crash...