gnuplot 安全漏洞

gnuplot is an interactive command-line tool that allows users to convert data and data functions into easy-to-see flat or three-dimensional graphics by entering commands. A security vulnerability exists in gnuplot v5.5, which contains a buffer overflow via the plotrequest function...

GLPI 安全漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

Kodi Home Theater Software 数字错误漏洞

Kodi Home Theater Software is an award-winning free and open source GPL software media player and digital media entertainment center from the individual developer Peter Frühberger. A security vulnerability exists in Kodi Home Theater Software version 19.5 and earlier, which stems from a de-zeroin...

PT-2023-25119 · Activeitzone · Active It Zone Active Ecommerce Cms

Name of the Vulnerable Software and Affected Versions: Active It Zone Active eCommerce CMS version 6.5.0 Description: A vulnerability was found in the Create Ticket Page component, specifically affecting the file /ecommerce/support ticket. The issue arises from the manipulation of the details...

WordPress Plugin Better Search 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

LibTIFF 安全漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF version 4.5.0, which stems from a buffer overflow vulnerability in /libtiff/tools/tiffcrop.c. The...

LibTIFF 安全漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF version 4.5.0, which stems from a buffer overflow vulnerability in the uvencode function...

CVE-2023-26274

IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248144...

PT-2023-5198 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM version 7.5.0 Description: The issue is related to the exposure of protected information. It allows a remote attacker to gain unauthorized access to sensitive data. Specifically, a delegated Admin tenant user with a specific...

PT-2023-5201 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM version 7.5.0 Description: The issue exists due to insufficient input validation, allowing a remote attacker to perform administrative actions. An authenticated user may be able to perform unauthorized actions. Recommendations...

CVE-2023-33997

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Robin Wilson bbp style pack plugin = 5.5.5 versions...

PT-2023-3767 · Siemens · Simatic Wincc

Name of the Vulnerable Software and Affected Versions: SIMATIC WinCC versions prior to V7.5.2.13 Description: The issue is related to improper permission assignment for a critical resource in the SCADA system. This could allow an authenticated local attacker to inject arbitrary code and escalate...

WordPress Plugin WP Activity Log 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Plugin Directorist 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An input validation error vulnerability...

PT-2023-24403 · Unknown · Imperial Cms

Name of the Vulnerable Software and Affected Versions: Imperial CMS version 7.5 Description: The issue allows for arbitrary file deletion via the DelspReFile function in the /sp/ListSp.php API endpoint. Attackers can exploit this by sending a crafted POST request to the vulnerable endpoint...

CVE-2023-3100

A vulnerability, which was classified as critical, has been found in IBOS 4.5.5. Affected by this issue is the function actionDel of the file ?r=dashboard/approval/del. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-0041

IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration. IBM X-Force ID: 243657...

Glyph & Cog XpdfReader 数字错误漏洞

Glyph & Cog XpdfReader is a free PDF viewer and toolkit from Glyph & Cog. Includes text extractor, image converter, HTML converter and more. A security vulnerability exists in Glyph & Cog XpdfReader versions prior to 4.05, which stems from a PDF page that is too large and causes Xpdf's text...

CVE-2023-28399

Incorrect permission assignment for critical resource exists in CONPROSYS HMI System CHS versions prior to 3.5.3. ACL Access Control List is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privileges is permitted to a user of the PC whe...

Vulnerabilities fixed in IBM QRadar Wincollect Agent

IBM has fixed vulnerabilities in the Wincollect Agent of QRadar. A local malicious person could exploit the vulnerabilities to grant themselves elevated privileges and execute arbitrary code execute code with permissions from the underlying system. IBM has released updates to fix the...