PT-2023-3902 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.27.0 Envoy versions prior to 1.26.4 Envoy versions prior to 1.25.9 Envoy versions prior to 1.24.10 Envoy versions prior to 1.23.12 Description: The issue is related to a use-after-free error in the HTTP CORS filter o...

Plexis Archiver 安全漏洞

archiver is a compression/decompression utility program. A security vulnerability exists in Plexis Archiver versions prior to 4.8.0, which stems from the fact that extracting archives using AbstractUnArchiver can lead to arbitrary file creation and remote code execution...

Apple Safari 安全漏洞

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari versions prior to 16.6. An attacker can exploit the vulnerability to execute arbitrary code...

Pimcore 信息泄露漏洞

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates applications for Web content management, e-commerce frameworks and product information management. An information disclosure vulnerability...

Panasonic Control FPWIN Pro 缓冲区错误漏洞

Panasonic Control FPWIN Pro is a programming software from Panasonic Corporation Japan. A security vulnerability exists in Panasonic Control FPWIN Pro version 7.6.0.3 and prior versions, which stems from a buffer overflow vulnerability that could allow an attacker to execute arbitrary code when...

KubePi 信息泄露漏洞

KubePi is a K8s panel. It allows administrators to import multiple Kubernetes clusters and assign permissions for different clusters, namespaces to specified users through permission control. An information disclosure vulnerability exists in KubePi versions prior to 1.6.5, which originates from t...

Dell Wyse Management Suite 授权问题漏洞

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes centralized management of Wyse endpoints, asset tracking and automated device discovery. A security bypass vulnerability exists in prior versions of Wyse Management Suite...

Samba 安全漏洞

Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in Samba versions prior to 4.18.5, which originates from an unauthenticated attacker being able to trigger an infinite loop error by issuing a malformed RPC request...

Weaver e-cology SQL注入漏洞

Weaver e-cology is a collaborative management application platform from China's Panmicro Technology Weaver. A SQL injection vulnerability exists in Weaver e-cology versions prior to 10.58.0, which stems from the filelFileDownloadForOutDoc.class parameter fileid that can lead to sql injection...

RWS WorldServer 安全特征问题漏洞

RWS WorldServer is a flexible, enterprise-class translation management system from RWS UK. A security vulnerability exists in RWS WorldServer version 11.7.3 and earlier, which stems from the presence of a session token enumeration issue...

PT-2023-26409 · Crestron · Crestron 3-Series Control Systems

Name of the Vulnerable Software and Affected Versions: Crestron 3-Series Control Systems versions prior to 1.8001.0187 Description: The issue allows an attacker to cause a crash by crafting and sending a specific BACnet packet. Recommendations: For Crestron 3-Series Control Systems versions prior...

PT-2023-26371 · Rswag · Rswag

Name of the Vulnerable Software and Affected Versions: rswag versions prior to 2.10.1 Description: The issue allows remote attackers to read arbitrary JSON and YAML files via directory traversal. This occurs because rswag-api can expose a file that is not the OpenAPI or Swagger specification file...

PT-2023-25690 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.24 Description: The issue is related to SQL Injection in the GitHub repository pimcore/pimcore. Recommendations: For versions prior to 10.5.24, update to version 10.5.24 or later to resolve the issue...

Elra Parkmatik SQL注入漏洞

Elra Parkmatik is an application from Elra Parkmatik, Inc. A SQL injection vulnerability exists in versions prior to Elra Parkmatik 02.01-a51, which stems from SQL injection possible via SOAP parameter tampering...

PT-2023-4184 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.170 Description: The issue is related to an out of bounds read and write in the WebGL component of Google Chrome, potentially allowing a remote attacker to exploit heap corruption via a crafted HTML...

PT-2023-18042 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a missing permission check in the updateSettingsInternalLI function of InstallPackageHelper.java, allowing an app to be sideloaded in the work profile. This coul...

Jenkins Plugin Sumologic Publisher 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

TamronOS 操作系统命令注入漏洞

TamronOS is an IPTV system from China's TamronOS. An OS command injection vulnerability exists in TamronOS versions prior to 20230703, which stems from an incorrect manipulation of the host parameter resulting in OS command injection...

PT-2023-25223 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: TeamPass versions prior to 3.0.10 Description: The issue allows unauthenticated actors to view application-specific and user data and files by viewing an endpoint directory listing, resulting in the exposure of sensitive information to...

TeamPass 代码注入漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A code injection vulnerability exists in versions prior to TeamPass 3.0.10. An attacker could exploit this vulnerability to perform a code injection attack...