Intel Unite 代码问题漏洞

Intel Unite is a suite of enterprise meeting collaboration solutions from Intel Corporation USA. A security vulnerability exists in Intel Unite versions prior to 4.2 that stems from the presence of an uncontrolled search path that could allow an authenticated user to potentially enable privilege...

Wordpress plugin Login Page Styler 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

pcs: webpack: Regression of CVE-2023-28154 fixes in the Red Hat Enterprise Linux

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 for PCS package, which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. Th...

bumsys 跨站脚本漏洞

bumsys is an open source project called Business Management System by unilogies individual developers. A cross-site scripting vulnerability exists in versions of bumsys prior to 2.2.0, which stems from a stored cross-site scripting XSS vulnerability...

PT-2023-20148 · Bumsys · Bumsys

Name of the Vulnerable Software and Affected Versions: bumsys versions prior to 2.2.0 Description: The issue concerns external control of file name or path in the GitHub repository unilogies/bumsys. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issu...

GeoVision GV-Edge Recording Manager 权限许可和访问控制问题漏洞

GeoVision GV-Edge Recording Manager is a video surveillance system from GeoVision Japan that realizes one-camera image management, remote monitoring, and more. A security vulnerability exists in GeoVision GV-Edge Recording Manager version 2.2.3.0, which originates from including incorrect...

PortlandLabs Concrete CMS 跨站脚本漏洞

PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. in the United States. A cross-site scripting vulnerability exists in PortlandLabs Concrete CMS versions prior to 9.2. An attacker can exploit this vulnerability to perform cross-site scripti...

PT-2023-21747 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS previously concrete5 versions 8.5.12 and below Concrete CMS previously concrete5 versions 9.0 through 9.1.3 Description: The issue concerns stored XSS on API Integrations via the name parameter. This allows for potential...

OURPHP 跨站脚本漏洞

OURPHP is OURPHP open source an open source , cross-platform , enterprise-class + e-commerce + applet + APP multi-terminal synchronization CMS station-building system . OURPHP version 7.2.0 and previous versions of security vulnerabilities , the vulnerability stems from the file ourphpout.php fou...

WordPress plugin Weaver Xtreme Theme Support 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

Oracle PeopleSoft Enterprise PeopleTools 安全漏洞

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for providing PeopleSoft applications with the ability to stay in sync with users' needs and expectations. A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools version 9.2, which can be exploited by an attacker...

OpenBSD 信任管理问题漏洞

OpenBSD is a cross-platform, BSD-based UNIX-like operating system from the Canadian OpenBSD project team. A trust management issue vulnerability exists in versions prior to OpenBSD 7.2, which stems from an error that occurs during unstored certificate validation that returns an incorrect error. A...

Directus 资源管理错误漏洞

Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A security vulnerability exists in the Directus API version v.2.2.0. A remote attacker could exploit this vulnerability to cause a denial of service via a large number of HTTP requests to the system...

CVE-2022-40699 WordPress Yet Another Stars Rating Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)

Cross-Site Scripting XSS vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin = 3.1.2 versions...

OpenSIPS 输入验证错误漏洞

OpenSIPS is a GPL-licensed SIP server implementation by the OpenSIPS Individual Developer. An input validation error vulnerability exists in OpenSIPS version 3.2 and earlier. An attacker could exploit this vulnerability to cause a system crash and denial of service...

Stellarium 路径遍历漏洞

Stellarium is a free GPL software from Stellarium that uses OpenGL to render realistic skies in real time. A security vulnerability exists in Stellarium version 1.2 and earlier versions. An attacker can exploit this vulnerability to read arbitrary files on the server running the application...

CVE-2023-27781

jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c...

OpenSIPS 安全漏洞

OpenSIPS is a GPL-licensed SIP server implementation by the OpenSIPS Individual Developer. A security vulnerability exists in OpenSIPS version 3.2 and earlier versions, which stems from a segmentation error triggered by sending an incorrectly formatted "Via" header in a call to the "calctagsuffix...

IBM MQ 安全漏洞

IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in IBM MQ version 9.2 CD, version 9.2 LTS, version 9...

Guizhou 115cms 代码问题漏洞

115cms is a multi-module intelligent website builder from Guizhou Forxin Technology 115cms Company in China. Guizhou 115cms version 4.2 has a code issue vulnerability, the vulnerability stems from the file /admin/content/index.html in the problem, will lead to unrestricted upload...