CData Arc 安全漏洞

CData Arc is a new data connectivity platform from CData Corporation designed to help organizations enable data-driven decision making and innovation. A security vulnerability exists in CData Arc versions prior to 23.4.8839 that stems from the presence of a path traversal vulnerability. An attack...

AZL-39493 CVE-2023-45288 affecting package coredns for versions less than 1.11.1-8

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

CVE-2024-29086

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow...

CVE-2024-29074

OpenHarmony v3.2.4 and earlier are affected by CVE-2024-29074, which allows a local attacker to execute arbitrary code in any app due to improper input validation. This is a local, high-severity issue with potential full control over targeted apps as indicated by CVSS metrics (AV:L, AC:L, PR:L, U...

CVE-2024-22098

OpenHarmony: CVE-2024-22098 is a local-use-after-free vulnerability in AVSession that allows arbitrary code execution in any app on OpenHarmony v3.2.4 and older. The root cause is use-after-free; impact is local and high (per CVSS, high for confidentiality, integrity, availability). No exploit de...

CVE-2024-21834

Summary of CVE-2024-21834 (OpenHarmony): OpenHarmony v3.2.4 and earlier versions contain a vulnerability that allows a local attacker to cause applications to crash due to a type confusion issue. The impact is described as availability loss (app crashes) with a local attack vector and low privile...

Ivanti Sentry 命令注入漏洞

Ivanti Sentry is an in-line gateway from Ivanti USA, Inc. It is used to manage, encrypt and protect traffic between mobile devices and back-end enterprise systems. A security vulnerability exists in Ivanti Sentry versions prior to 9.19.0. An attacker exploiting this vulnerability could execute...

PT-2024-11725 · Unknown · Nickys Image Map Pro

Name of the Vulnerable Software and Affected Versions: Nickys Image Map Pro versions prior to 5.6.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, an...

Ladle 安全漏洞

Ladle is a separate package and command from Ladle, Inc. A security vulnerability exists in Ladle 2.5.1 and prior versions that originated from allowing an attacker to read user-accessible files via a GET request...

Splunk 安全漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. Splunk...

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system for stemword individual developers. A cross-site scripting vulnerability exists in Bdtask Multi-Store Inventory Management System 20240320 and prior versions, which stems from a cross-site scripting XSS vulnerability in the component...

PT-2024-22605 · Ampache · Ampache

Name of the Vulnerable Software and Affected Versions: Ampache versions prior to 6.3.1 Description: Ampache, a web-based audio/video streaming application and file manager, has multiple reflective XSS vulnerabilities. This issue affects all forms in Ampache that use the rule variable, such as whe...

PT-2024-23292 · Decalog · Decalog

Name of the Vulnerable Software and Affected Versions: DecaLog versions prior to 3.9.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious SQL...

PT-2025-16951 · Dell · Dell Ecs

Name of the Vulnerable Software and Affected Versions: Dell ECS versions 3.8.1.4 and prior Description: The issue is related to an Improper Certificate Validation, which could be exploited by an unauthenticated attacker with adjacent network access, potentially leading to information disclosure...

TeamViewer 安全漏洞

TeamViewer is a software from TeamViewer, Inc. for remote access as well as remote control and remote maintenance of computers and other end devices. A security vulnerability exists in TeamViewer versions prior to 15.52 that stems from the presence of an insecure UNIX symbolic link in the...

KDDI HGW BL1500HM 安全漏洞

The KDDI HGW BL1500HM is a home router from KDDI Japan. A security vulnerability exists in KDDI HGW BL1500HM version 002.001.013 and prior versions. An attacker exploiting this vulnerability may be able to change system settings...

PT-2024-18255

Name of the Vulnerable Software and Affected Versions gradio versions prior to 4.19.2 Description A Cross-Site Request Forgery CSRF issue allows attackers to upload multiple large files to a victim's system if they are running Gradio locally. By crafting a malicious HTML page that triggers an...

Distrobox 安全漏洞

Distrobox is an application by Luca Di Maio Personal Developer. Containers can be created using podman, docker or liipod. A security vulnerability exists in Distrobox versions prior to 1.7.0.1 that could allow an attacker to execute arbitrary code via command injection into an exported executable...

PT-2024-22182 · Unknown · Propertyhive

Name of the Vulnerable Software and Affected Versions: PropertyHive versions prior to 2.0.10 Description: The issue is related to Deserialization of Untrusted Data. This can potentially lead to security risks if exploited. Recommendations: For versions prior to 2.0.10, update to version 2.0.10 or...

DEBIAN-CVE-2024-2612

If an attacker could find a way to trigger a particular code path in SafeRefPtr, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9...