CVE-2023-25980

Cross-Site Request Forgery CSRF vulnerability in CAGE Web Design | Rolf van Gelder Optimize Database after Deleting Revisions plugin = 5.1 versions...

Chat Server Buffer Error Vulnerability

Chat Server is ramank775 individual developer's chat server based on microservices architecture that supports high availability, high throughput, and horizontal scaling. A buffer error vulnerability exists in Easy Chat Server version 3.1, which stems from the presence of a buffer overflow...

CVE-2023-25463

Cross-Site Request Forgery CSRF vulnerability in Gopi Ramasamy WP tell a friend popup form plugin = 7.1 versions...

CVE-2023-43268

Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability...

Pure Storage FlashBlade Security Vulnerability

Pure Storage FlashBlade is a consolidated storage platform for file and object workloads from U.S.-based Pure Storage. A security vulnerability exists in FlashBlade Purity OE version 4.1.0, which stems from a flaw in the system where a user who is authorized to extend the object retention period...

Symantec Protection Engine Security Vulnerability

Symantec Protection Engine is a malware protection platform from Symantec USA. A security vulnerability exists in Symantec Protection Engine versions prior to 9.1.0, which stems from a hash disclosure vulnerability...

PT-2023-27299 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 20.1 Description: An out-of-bounds write issue exists in the allocate buffer for jpeg decoding functionality. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious fil...

Accusoft ImageGear Buffer Error Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft Corporation, USA. A security vulnerability exists in Accusoft ImageGear version 20.1, which stems from a specially crafted, incorrectly formatted file that may result in memory corruption...

PT-2023-31786 · WordPress · Easy Registration Forms

Name of the Vulnerable Software and Affected Versions: Easy Registration Forms for WordPress versions up to, and including, 2.1.1 Description: The issue allows authenticated attackers with subscriber-level capabilities or above to retrieve arbitrary sensitive user meta via the erforms user meta...

MiniTool Movie Maker Trust Management Issue Vulnerability

MiniTool Movie Maker is a clean and simple video editing software from MiniTool. MiniTool Movie Maker 6.1.0 suffers from a trust management issue vulnerability that originates from allowing an attacker to achieve remote code execution via a man-in-the-middle attack...

WordPress Plugin Feeds for YouTube Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Plugin Booster for WooCommerce Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-30729

Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic including sensitive information...

Apache Superset 安全漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset version 2.1.0 and prior versions have an authorization issue vulnerability that stems from incorrect authorization checks in SQLLab. An attacker can exploit the vulnerability to...

SearchBlox Security Breach

SearchBlox is an application from US-based SearchBlox, Inc. Provides a powerful enterprise search architecture for on-premise or cloud deployments. A security vulnerability exists in SearchBlox versions prior to 9.1. An attacker can exploit the vulnerability to create multiple super administrator...

TOTVS RM Cross-Site Scripting Vulnerability

TOTVS RM is a complete human resource management solution from TOTVS Brazil. A cross-site scripting vulnerability exists in TOTVS RM version 12.1, which stems from the fact that incorrect manipulation of parameter d can lead to cross-site scripting...

CVE-2023-34175

Unauth. Reflected Cross-Site Scripting XSS vulnerability in GrandSlambert Login Configurator plugin = 2.1 versions...

SUSE CVE-2020-19187

Buffer Overflow vulnerability in fmtentry function in progs/dumpentry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

open-mpi hwloc 代码问题漏洞

open-mpi hwloc is an open source tool library for obtaining hardware topology information and resource allocation in multi-core computer systems. A security vulnerability exists in open-mpi hwloc version 2.1.0, which originated from allowing an attacker to cause a denial of service DoS via the...

ncurses 缓冲区错误漏洞

ncurses is a character terminal processing library that provides a set of functions that can be called by the user to generate a text-based user interface. A security vulnerability exists in ncurses version 6.1 due to a buffer overflow in the ncfindentry method of tinfo/comphash.c. The...