JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript Project. A security vulnerability exists in JerryscriptProject jerryscript version v.3.0.0. An attacker exploited the vulnerability to obtain sensitive information via a specially crafted array script...

MultiTech Conduit AP 跨站请求伪造漏洞

The MultiTech Conduit AP is a connector from MultiTech USA. A security vulnerability exists in MultiTech Conduit AP MTCAP2-L4E1 MTCAP2-L4E1-868-042A v.6.0.0. A remote attacker could exploit the vulnerability to execute arbitrary code via specially crafted scripts...

CVE-2023-36201

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...

Progress Software MOVEit Transfer 安全漏洞

Progress Software MOVEit Transfer is an automated file transfer software from Progress Software, USA. The software supports file transfers and provides file transfer activity monitoring. A security vulnerability exists in Progress Software MOVEit Transfer that originates from allowing an attacker...

VulnCheck KEV: CVE-2023-23333

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php...

PT-2023-18751

Name of the Vulnerable Software and Affected Versions Apache Airflow JDBC Provider versions prior to 4.0.0 Description The issue is related to improper input validation in the Apache Airflow JDBC Provider, specifically in the Connection URL parameters of the Airflow JDBC Provider Connection, whic...

PHPGurukul Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A security vulnerability exists in PHPGurukul Hospital Management System version 1.0, which stems from a stored cross-site scripting XSS vulnerability...

PT-2023-24838 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.04 Description: The issue occurs when Xpdf 4.04 encounters a PDF object stream whose Length field is itself in another object stream, causing a deadlock. Recommendations: For Xpdf version 4.04, consider updating to a newer...

CVE-2023-36346

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

CVE-2023-2990

Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service...

PT-2023-3650 · Unknown · Spidercontrol Scada Web Server

Name of the Vulnerable Software and Affected Versions: SpiderControl SCADA Webserver versions 2.08 and prior Description: The issue exists due to incorrect restriction of the path name to a directory with limited access. Exploitation of this issue may allow a remote attacker to cause a...

SUSE-SU-2023:2224-2 Security update for curl

This update for curl adds the following feature: Update to version 8.0.1 jscPED-2580 - CVE-2023-28319: use-after-free in SSH sha256 fingerprint check bsc1211230. - CVE-2023-28320: siglongjmp race condition bsc1211231. - CVE-2023-28321: IDN wildcard matching bsc1211232. - CVE-2023-28322:...

CVE-2023-35095

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Flothemes Flo Forms – Easy Drag & Drop Form Builder plugin = 1.0.40 versions...

Rail Pass Management System SQL注入漏洞

Rail Pass Management System is a pass management system. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Rail Pass Management System, which stems from an incorrect manipulation of the parameter searchdata resulting in sql injection...

PT-2023-24978 · Unknown · Phpgurukul Cyber Cafe Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Cyber Cafe Management System version 1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the admin username parameter, which can lead to cross-site scripting XSS attacks. Recommendations: F...

PT-2023-6099 · Suricata +2 · Suricata +2

Name of the Vulnerable Software and Affected Versions: Suricata versions prior to 6.0.13 Description: The issue is related to insufficient input validation in the Suricata intrusion detection and prevention system. It may allow a remote attacker to execute arbitrary code. An adversary who control...

PT-2023-3351 · Fortinet · Fortisiem

Name of the Vulnerable Software and Affected Versions: FortiSIEM versions prior to 7.0.0 Description: The issue is related to an improper restriction of excessive authentication attempts, which may allow a non-privileged user with access to several endpoints to perform a brute force attack on the...

PT-2023-22613 · Mim Software · Mim License Server +1

Name of the Vulnerable Software and Affected Versions: MIM software Inc MIM License Server and MIMpacs services versions 6.9 through 7.0 Description: The issue allows a remote unauthenticated attacker to execute arbitrary code via the RMI Registry service. Recommendations: For versions 6.9 throug...

Snowflake snowflake-connector-net 命令注入漏洞

Snowflake snowflake-connector-net is the Snowflake Connector for . A command injection vulnerability exists in snowflake-connector-net versions prior to 2.0.18. The vulnerability stems from easy command injection via SSO URL authentication, which can be exploited by an attacker to cause remote co...

miniCal Cross-Site Scripting Vulnerability

miniCal is miniCal open source an open source PMS. miniCal version 1.0.0 cross-site scripting vulnerability can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a carefully crafted payload...