PT-2024-1026 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.199 Description: The issue is related to a use after free vulnerability in the WebAudio component of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a...

CVE-2023-49142

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

Null pointer dereference

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer...

PT-2024-13683 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 3.2.2 and prior Description: The issue allows a local attacker to cause a multimedia audio crash by modifying a released pointer. Recommendations: For OpenHarmony versions 3.2.2 and prior, at the moment, there is no...

PT-2023-9285 · Apache · Apache Streampark

Name of the Vulnerable Software and Affected Versions: Apache StreamPark versions prior to 2.1.4 Description: The issue is related to incorrect handling of the element in the Project Module of Apache StreamPark, allowing for remote command execution. The vulnerability can be exploited by insertin...

PT-2023-14943 · Intel · Scone

Name of the Vulnerable Software and Affected Versions: SCONE versions prior to 5.8.0 Description: A lack of pointer-validation logic in the scone dispatch component of SCONE for Intel SGX allows attackers to access sensitive information. Recommendations: For versions prior to 5.8.0, update to...

Weseek GROWI Security Vulnerability

Weseek GROWI is a team collaboration software package from Weseek Japan. A security vulnerability exists in Weseek GROWI versions prior to 6.0.0, which stems from a stored cross-site scripting XSS vulnerability when processing MathJax...

PT-2023-30163 · Growi · Growi

Name of the Vulnerable Software and Affected Versions: GROWI versions prior to v6.0.0 Description: A cross-site request forgery CSRF issue exists in the User settings /me page. If a user views a malicious page while logged in, settings may be changed without the user's intention. The API endpoint...

PT-2023-29660 · Growi · Growi

Name of the Vulnerable Software and Affected Versions: GROWI versions prior to v3.5.0 Description: A stored cross-site scripting issue exists in the App Settings /admin/app page and the Markdown Settings /admin/markdown page. If exploited, an arbitrary script may be executed on the web browser of...

PT-2023-31059 · Growi · Growi

Name of the Vulnerable Software and Affected Versions: GROWI versions prior to v6.0.0 Description: A stored cross-site scripting issue exists via the img tags. If exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product. Recommendations...

Postfix Data Forgery Issue Vulnerability

Postfix is an open source mail transfer agent. A data forgery issue vulnerability exists in versions prior to Postfix 3.8.4, which stems from a vulnerability that allows an attacker to bypass the SPF protection mechanism for SMTP smuggling...

AZL-32270 CVE-2023-7008 affecting package systemd for versions less than 250.3-22

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles or the upstream DNS resolver to manipulate records...

PT-2023-8045 · Moxa · Iologik E1200 Series

Name of the Vulnerable Software and Affected Versions: ioLogik E1200 Series firmware versions v3.3 and prior Description: A weak cryptographic algorithm vulnerability has been identified, which can help an attacker compromise the confidentiality of sensitive data and may lead to unexpected...

PT-2023-8238 · Siemens · Jt2Go +1

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 14.3.0.6 Teamcenter Visualization V13.3 versions prior to 13.3.0.13 Teamcenter Visualization V14.1 versions prior to 14.1.0.12 Teamcenter Visualization V14.2 versions prior to 14.2.0.9 Teamcenter Visualization V14.3...

WordPress Plugin Drag and Drop Multiple File Upload for WooCommerce Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

WordPress plugin Job Board and Recruitment - JobWP Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

PT-2023-25379 · Woocommerce · Woocommerce Subscriptions

Name of the Vulnerable Software and Affected Versions: WooCommerce Woo Subscriptions versions prior to 5.1.3 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability affects WooCommerce Woo Subscriptions, allowing unauthorized...

PT-2023-9150 · Owasp · Owasp Antisamy .Net

Name of the Vulnerable Software and Affected Versions: OWASP AntiSamy .NET versions prior to 1.2.0 Description: The issue is related to a mutation cross-site scripting mXSS vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. This vulnerability can be exploited when the...

Mozilla Firefox Security Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 121, Firefox ESR versions prior to 115.6, and Thunderbird versions prior to 115.6, which stems from susceptibility to heap buffer...