3009 matches found
IBM Security verify Information Queue 安全漏洞
IBM Security Verify Information Queue is an integration product from International Business Machines IBM. utilizes Kafka technology and a publish/subscribe model to integrate data between IBM Security products. A security vulnerability exists in IBM Security Verify Information Queue versions 10.0...
IBM Security Verify Information Queue 安全漏洞
IBM Security Verify Information Queue is an integration product from International Business Machines IBM. utilizes Kafka technology and a publish/subscribe model to integrate data between IBM Security products. A security vulnerability exists in IBM Security Verify Information Queue versions 10.0...
PT-2023-5221 · Ibm · Ibm Security Verify Information Queue
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Information Queue versions 10.0.4 through 10.0.5 Description: The issue is related to a flaw in the error reporting mechanism of IBM Security Verify Information Queue, which could allow a remote attacker to obtain sensitiv...
CVE-2023-25471
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP OpenWeather plugin = 2.5.0 versions...
SUSE CVE-2020-18652
Buffer Overflow vulnerability in WEBPSupport.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file...
AZL-43711 CVE-2020-35357 affecting package gsl 2.6-3
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL GNU Scientific Library, versions 2.5 and 2.6. Processing a maliciously crafted input data for gslstatsquantilefromsorteddata of the library may lead to unexpected application termination or arbitra...
Codecanyon Crypto Currency Tracker 安全漏洞
Codecanyon Crypto Currency Tracker is a cryptocurrency tracker from the US company Codecanyon. A security vulnerability exists in Codecanyon Crypto Currency Tracker 9.5 and earlier versions that stems from the ability to create an administrator account without authentication...
N.V.K.INTER iBSG 信任管理问题漏洞
N.V.K.INTER iBSG NVK iBSG is a security appliance from N.V.K.INTER, Inc. A security vulnerability exists in N.V.K.INTER iBSG version v3.5, which stems from the presence of a hard-coded root password that allows an attacker to log in with root privileges via SSH service...
N.V.K.INTER iBSG 命令注入漏洞
N.V.K.INTER iBSG NVK iBSG is a security appliance from N.V.K.INTER, Inc. A security vulnerability exists in N.V.K.INTER iBSG version v3.5, which originates from a command injection vulnerability in the parameter systemhostname in the file /manage/network-basic.php...
CVE-2023-28690
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marco Steinbrecher WP BrowserUpdate plugin = 4.5 versions...
PT-2023-21907 · Marco Steinbrecher · Wp Browserupdate
Name of the Vulnerable Software and Affected Versions: Marco Steinbrecher WP BrowserUpdate plugin versions = 4.5 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts int...
PT-2023-27371 · Gnu +2 · Gnu Inetutils +2
Name of the Vulnerable Software and Affected Versions: GNU inetutils versions prior to 2.5 Description: The issue allows privilege escalation due to unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is relevant if the setuid system call fails when ...
CVE-2023-24391
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Spider Teams ApplyOnline plugin = 2.5 versions...
CVE-2023-27373
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM...
WordPress plugin Custom Field Template cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2023-9812 · Ibm · Ibm Db2
Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue is related to a denial of service vulnerability that can be exploited with a specially crafted query, allowing a remote...
Zkteco BioTime Path Traversal Vulnerability
ZKTeco BioTime is a powerful web-based time and attendance management software from the Chinese company ZKTeco. A path traversal vulnerability exists in ZKTeco BioTime version v8.5.5, which originates from a vulnerability that allows an unauthenticated attacker to read arbitrary files by providin...
CVE-2023-37647
SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /AntSuxin.php...
Apple macOS Ventura 缓冲区错误漏洞
Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.5, which originates from an application that may be able to execute arbitrary code using kernel privileges...