PT-2023-8510 · Qnap · Qnap Qts +2

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.1.4.2596 build 20231128 QNAP QuTS hero versions prior to h5.1.4.2596 build 20231128 QNAP QuTScloud versions prior to c5.1.5.2651 Description: The issue is related to an OS command injection vulnerability that coul...

Amazon Linux AMI : transfig (ALAS-2023-1807)

The version of transfig installed on the remote host is prior to 3.2.7b-10.8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1807 advisory. 2024-06-07: CVE-2019-19797 was added to this advisory. An out-of-bounds write flaw was found in transfig in the way th...

CVE-2023-4455 Cross-Site Request Forgery (CSRF) in wallabag/wallabag

Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.6.3...

SUSE CVE-2023-4353

Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-29151

Uncontrolled search path element in some IntelR PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-27015 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 2 Description: A use-after-free issue has been identified in the affected application, which could be triggered while parsing specially crafted DWG files. This could allow an attacker to execu...

SUSE CVE-2023-4074

Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2023-4070

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2022-4908

Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Infodrom Software E-Invoice Approval System 安全漏洞

Infodrom Software E-Invoice Approval System is an electronic invoice approval system from Infodrom Software, Turkey. A security vulnerability exists in Infodrom Software E-Invoice Approval System prior to version v.20230701, which stems from a plaintext stored password vulnerability that allows...

PT-2023-3572 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.98 Description: The issue is related to the implementation of WebRTC technology in Google Chrome, specifically a use after free error. This could allow a remote attacker to potentially exploit heap...

PT-2023-4181 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.170 Description: The issue is related to a use after free in Blink Task Scheduling, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead...

PT-2023-5196 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.0 Description: The issue is related to improper input validation, which may allow an unauthorized user to enable an escalation of privilege via network access. This could potentially be...

tarteaucitron.js 跨站脚本漏洞

tarteaucitron.js is a GDPR-friendly cookie manager. A cross-site scripting vulnerability exists in versions of tarteaucitron.js prior to v1.13.1, which stems from vulnerability to stored cross-site scripting XSS attacks...

PT-2023-16386 · WordPress · Catalyst Connect Zoho Crm Client Portal

Name of the Vulnerable Software and Affected Versions: Catalyst Connect Zoho CRM Client Portal WordPress plugin versions prior to 2.1.0 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitized and escaped before being...

PT-2023-13960 · WordPress · Editorial Calendar

Name of the Vulnerable Software and Affected Versions: Editorial Calendar WordPress plugin versions prior to 3.8.3 Description: The issue allows users with roles as low as contributor to inject arbitrary web scripts in the plugin admin panel, enabling a Stored Cross-Site Scripting vulnerability...

PT-2023-3650 · Unknown · Spidercontrol Scada Web Server

Name of the Vulnerable Software and Affected Versions: SpiderControl SCADA Webserver versions 2.08 and prior Description: The issue exists due to incorrect restriction of the path name to a directory with limited access. Exploitation of this issue may allow a remote attacker to cause a...

PT-2023-20595 · Hewlett Packard · Hp Device Manager

Name of the Vulnerable Software and Affected Versions: HP Device Manager versions prior to 5.0.10 Description: The issue potentially allows command injection and/or elevation of privileges. Recommendations: For versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue...

CVE-2023-1388

A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory block, resulting in the service becoming unavailable...

SUSE CVE-2023-3079

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...