3995 matches found
CVE-2023-22615
An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can pass an address in the RCX save state register that overlaps SMRAM, thereby coercing an IHISI subfunction handler to overwrite private SMRAM...
PT-2023-6335 · Adobe · Substance3D - Stager
Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.0.1 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use...
SAP SapSetup 代码问题漏洞
SAP SapSetup is an application from SAP, Germany. A suite of tools for installing, updating, maintaining, and distributing software on Windows. A code issue vulnerability exists in SAP SapSetup version 9.0, which can be exploited by an attacker for elevation of privilege...
PT-2023-17365 · Unknown · Sourcecodester Online Computer/Laptop Store
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the Product Search component, specifically affecting the file /?p=products. The search argument is vulnerable to sql injection, allowi...
IBM TRIRIGA Application Platform 代码问题漏洞
The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from International Business Machines IBM. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...
IBM Sterling Order Management 安全漏洞
IBM Sterling Order Management is an order management system from International Business Machines IBM. A security vulnerability exists in IBM Sterling Order Management version 10.0 that stems from not requiring users to use strong passwords by default, making it easier for attackers to break into...
PT-2023-21919
Name of the Vulnerable Software and Affected Versions Apache Airflow Spark Provider versions prior to 4.0.1 Description The issue is related to improper input validation in the Apache Airflow Spark Provider. This allows the host and schema of JDBC Hook to contain / and ?, which can be used to...
CVE-2023-0580
Insecure Storage of Sensitive Information vulnerability in ABB My Control System on-premise allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System...
Simple Guestbook Management System 跨站脚本漏洞
Simple Guestbook Management System is a guestbook management system. A security vulnerability exists in Simple Guestbook Management System version 1.0. An attacker could exploit this vulnerability to conduct a cross-site scripting attack...
An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However two SSH settings were omitted from the configuration check allowing them to match easily potentially leading to the reuse of an inappropriate connection.
...
firefly-iii 输入验证错误漏洞
firefly-iii is a free and open source personal finance manager. An input validation error vulnerability exists in firefly-iii versions prior to 6.0.0 that stems from improper input validation...
CVE-2022-47190
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...
AZL-25846 CVE-2023-27535 affecting package curl for versions less than 8.0.1-1
An authentication bypass vulnerability exists in libcurl 8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain...
Apache OpenMeetings 访问控制错误漏洞
Apache OpenMeetings is a multilingual, customizable video conferencing and collaboration system from the Apache Foundation. The product supports audio, video and allows users to view each participant's desktop, among other things. An access control error vulnerability exists in Apache OpenMeeting...
CVE-2023-25864
Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Phpgurukul Park Ticketing Management System SQL注入漏洞
PHPGurukul Park Ticketing Management System is a park ticketing management system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of the Phpgurukul Park Ticketing Management System, which stems from a discovery containing a SQL injection attack via the User Name parameter...
Double Free
Overview Affected versions of this package are vulnerable to Double Free. The nnops.fractionalavgpoolv2 and nnops.fractionalmaxpoolv2 functions require the first and fourth elements of their parameter poolingratio to be equal to 1.0, as pooling on batch and channel dimensions is not supported. Po...
Osprey Pump Controller 命令注入漏洞
Osprey Pump Controller is a pump controller from Osprey. A security vulnerability exists in Osprey Pump Controller version 1.01 that stems from the presence of a command injection vulnerability. An attacker can exploit the vulnerability to gain access to the system...
IBM WebSphere Application Server 跨站脚本漏洞
IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A cross-site scripting vulnerability exists in IBM...
