ncurses 缓冲区错误漏洞

ncurses is a character terminal processing library that provides a set of functions that can be called by the user to generate a text-based user interface. A security vulnerability exists in ncurses version 6.1 due to a buffer overflow in the postprocessterminfo method of tinfo/parseentry.c. The...

ncurses 缓冲区错误漏洞

ncurses is a character terminal processing library that provides a set of functions that can be called by the user to generate a text-based user interface. A security vulnerability exists in ncurses version 6.1 due to a buffer overflow in the fmtentry method of progs/dumpentry.c. The vulnerabilit...

PT-2023-11514 · Ncurses +1 · Ncurses +1

Name of the Vulnerable Software and Affected Versions: ncurses version 6.1 Description: The issue is related to a Buffer Overflow vulnerability in the fmt entry function in progs/dump entry.c:1100 of ncurses. This vulnerability allows remote attackers to cause a denial of service via crafted...

CVE-2023-3698

Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below...

WordPress plugin Advanced Category Template 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

AZL-27937 CVE-2023-28938 affecting package mdadm for versions less than 4.1-11

Uncontrolled resource consumption in some IntelR SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of service via local access...

Intel ITS Security Vulnerability

Intel ITS is an Intelligent Test System from Intel Corporation USA. A security vulnerability exists in IntelR ITS versions prior to 3.1 that stems from incorrect default permissions. An attacker could exploit the vulnerability to elevate privileges...

PHP Code Issues Vulnerabilities

PHP is a scripting language for PHP that executes on the server side. PHP suffers from a code issue vulnerability that stems from loading external entities without XML enabled, resulting in a local file disclosure. Affected products and versions: PHP version 8.0 prior to 8.0.30, version 8.1 prior...

License and ciphers are missing after upgrading to the latest version on 13.0 and 13.1

License and ciphers are missing after upgrade to the latest version on 13.0 and 13.1...

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

CVE-2023-33373

Connected IO v2.1.0 and prior keeps passwords and credentials in clear-text format, allowing attackers to exfiltrate the credentials and use them to impersonate the devices...

PT-2023-9812 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue is related to a denial of service vulnerability that can be exploited with a specially crafted query, allowing a remote...

PT-2023-27793 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Bus Reservation System version 1.1 Description: A vulnerability was found in the PHP Jabbers Bus Reservation System, affecting some unknown functionality of the file /index.php. The manipulation of the pickup id argument in the...

CVE-2022-42183

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery SSRF...

Netscaler nstcpdump timestamp shows as UTC+0 instead of device local time(e.g. GMT+9).

Starting from version 13.1, when the TCPDUMP command is executed in CLI, GMT+0 time is applied instead of GMT+9 time set in Netscaler. Nstrace is normally applied as GMT+9 time, but only TCPDUMP is applied as GMT+0...

CVE-2023-34369

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in GrandSlambert Login Configurator plugin = 2.1 versions...

WordPress plugin Login Configurator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Babel 缓冲区错误漏洞

Babel is a multilingual support module used in content management systems. A buffer error vulnerability exists in Open Babel version 3.1.1. An attacker could exploit this vulnerability to cause arbitrary code execution via a specially crafted, malformed file...

Wifi Soft Unibox Administration SQL注入漏洞

Wifi Soft Unibox Administration is a smart access controller and hotspot gateway from Wifi Soft USA. It provides complete control over wired and wireless networks. A SQL injection vulnerability exists in Wifi Soft Unibox Administration versions 3.0 and 3.1, which originates from unverified or...

Icewarp Icearp 跨站脚本漏洞

Icewarp Icearp is an email, messaging and collaboration service for small, medium and enterprise-level businesses from the Czech company Icewarp. A cross-site scripting vulnerability exists in Icewarp Icearp version 10.2.1, which stems from the presence of a cross-site scripting XSS vulnerability...