1373 matches found
PT-2023-8510 · Qnap · Qnap Qts +2
Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.1.4.2596 build 20231128 QNAP QuTS hero versions prior to h5.1.4.2596 build 20231128 QNAP QuTScloud versions prior to c5.1.5.2651 Description: The issue is related to an OS command injection vulnerability that coul...
Amazon Linux AMI : transfig (ALAS-2023-1807)
The version of transfig installed on the remote host is prior to 3.2.7b-10.8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1807 advisory. 2024-06-07: CVE-2019-19797 was added to this advisory. An out-of-bounds write flaw was found in transfig in the way th...
CVE-2023-4455 Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.6.3...
SUSE CVE-2023-4353
Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-29151
Uncontrolled search path element in some IntelR PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2023-27015 · Siemens · Solid Edge
Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 2 Description: A use-after-free issue has been identified in the affected application, which could be triggered while parsing specially crafted DWG files. This could allow an attacker to execu...
SUSE CVE-2023-4074
Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2023-4070
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2022-4908
Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
Infodrom Software E-Invoice Approval System 安全漏洞
Infodrom Software E-Invoice Approval System is an electronic invoice approval system from Infodrom Software, Turkey. A security vulnerability exists in Infodrom Software E-Invoice Approval System prior to version v.20230701, which stems from a plaintext stored password vulnerability that allows...
PT-2023-3572 · Google +2 · Google Chrome +2
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.98 Description: The issue is related to the implementation of WebRTC technology in Google Chrome, specifically a use after free error. This could allow a remote attacker to potentially exploit heap...
PT-2023-4181 · Google +3 · Google Chrome +3
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.170 Description: The issue is related to a use after free in Blink Task Scheduling, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead...
tarteaucitron.js 跨站脚本漏洞
tarteaucitron.js is a GDPR-friendly cookie manager. A cross-site scripting vulnerability exists in versions of tarteaucitron.js prior to v1.13.1, which stems from vulnerability to stored cross-site scripting XSS attacks...
PT-2023-5196 · Zoom · Zoom Desktop Client For Windows
Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.0 Description: The issue is related to improper input validation, which may allow an unauthorized user to enable an escalation of privilege via network access. This could potentially be...
PT-2023-13960 · WordPress · Editorial Calendar
Name of the Vulnerable Software and Affected Versions: Editorial Calendar WordPress plugin versions prior to 3.8.3 Description: The issue allows users with roles as low as contributor to inject arbitrary web scripts in the plugin admin panel, enabling a Stored Cross-Site Scripting vulnerability...
PT-2023-16386 · WordPress · Catalyst Connect Zoho Crm Client Portal
Name of the Vulnerable Software and Affected Versions: Catalyst Connect Zoho CRM Client Portal WordPress plugin versions prior to 2.1.0 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitized and escaped before being...
PT-2023-3650 · Unknown · Spidercontrol Scada Web Server
Name of the Vulnerable Software and Affected Versions: SpiderControl SCADA Webserver versions 2.08 and prior Description: The issue exists due to incorrect restriction of the path name to a directory with limited access. Exploitation of this issue may allow a remote attacker to cause a...
PT-2023-20595 · Hewlett Packard · Hp Device Manager
Name of the Vulnerable Software and Affected Versions: HP Device Manager versions prior to 5.0.10 Description: The issue potentially allows command injection and/or elevation of privileges. Recommendations: For versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue...
CVE-2023-1388
A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory block, resulting in the service becoming unavailable...