3009 matches found
PT-2023-26543 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue is a null pointer dereference in the paddle.flip function, which results in a runtime crash and denial of service. Recommendations: For versions prior to 2.5.0, update to version 2.5...
PaddlePaddle 资源管理错误漏洞
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. A security vulnerability exists in PaddlePaddle versions prior to 2.5.0, which stems from a Use after free vulnerability. An attacker could use this vulnerability to perform unauthorized operations or...
PaddlePaddle 代码问题漏洞
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle version 2.5.0 before there is a security vulnerability , the vulnerability stems from the PaddlePaddle paddle.flip function in the existence of a null pointer dereference Null pointer...
CVE-2023-34798
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-34798
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file...
Weaver E-Office 代码问题漏洞
Weaver E-Office is a collaborative office system from China's Panavision Technologies Weaver. A security vulnerability exists in weaver e-office versions prior to v9.5. The vulnerability stems from the presence of an arbitrary file upload vulnerability, which allows an attacker to execute arbitra...
Apple macOS Ventura 安全漏洞
Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura versions prior to 13.5. An attacker can exploit the vulnerability to execute arbitrary code with kernel privileges...
PT-2023-23934 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 Description: A logic issue was addressed with improved state management, allowing a user to potentially read information belonging to another user. Recommendations: For versions prior to 13.5, update to macOS...
PT-2023-4118 · Apple · Ipados +3
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Ventura versions prior to 13.5 Description: The issue is related to a buffer overflow in memory, which may allow an attacker to execute arbitrary code with kernel privileges. The...
HGiga iSherlock 操作系统命令注入漏洞
HGiga iSherlock is a series of software products from China's Henderson Technology HGiga. An operating system command injection vulnerability exists in HGiga iSherlock version 4.5, which originates from allowing operating system command injection...
WordPress Plugin Jupiter X Core 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exis...
PT-2023-26234 · Ibos Oa · Ibos Oa
Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue affects the processing of the file ?r=article/category/del in the Delete Category Handler component, leading to sql injection. The attack can be initiated remotely. The issue has been public...
PT-2023-26157 · Activeitzone · Active Super Shop Cms
Name of the Vulnerable Software and Affected Versions: ActiveITzone Active Super Shop CMS version 2.5 Description: A problematic issue has been found in the Manage Details Page component, where the manipulation of the name, phone, or address arguments leads to cross-site scripting. The attack can...
TIBCO Software EBX Add-ons SQL注入漏洞
TIBCO Software EBX Add-ons is an add-on from TIBCO Software, Inc. that enhances the functionality of the Tibco Ebx data management platform. A security vulnerability exists in TIBCO EBX Add-ons versions 4.5.17 and earlier, 5.6.2 and earlier, and 6.1.0, which stems from an easily exploitable...
CVE-2023-35096
Cross-Site Request Forgery CSRF vulnerability in myCred plugin = 2.5 versions...
PT-2023-4084 · Siemens · Simatic Cn 4100
Name of the Vulnerable Software and Affected Versions: SIMATIC CN 4100 versions prior to V2.5 Description: A vulnerability has been identified in the SIMATIC CN 4100, related to an incorrect default value in the SSH configuration. This issue could allow an attacker to bypass network isolation. Th...
CVE-2023-30431
IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: 252184...
CVE-2023-23487
IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 and 11.5 is vulnerable to insufficient audit logging. IBM X-Force ID: 245918...
PT-2023-5541 · Ibm · Ibm Db2 Connect Server +1
Name of the Vulnerable Software and Affected Versions: IBM DB2 versions 10.5 through 11.5 IBM DB2 Connect Server versions 10.5 through 11.5 Description: The issue is related to insufficient input validation in the IBM DB2 database management system and the IBM DB2 Connect Server, which can be...