QNAP Systems License Center 安全漏洞

QNAP Systems License Center is a tool for monitoring and managing the licenses of applications running on local devices from China's Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems License Center version 1.9.43 and prior versions that stems from the inclusion of a...

PT-2024-36919

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue arises from the migrate to node function assuming there is at least one VMA in a MM, which is not always true. This can lead to find vma returning NULL, and subsequently, a null point...

Documenso 安全漏洞

Documenso is an open source DocuSign alternative to Documenso Open Source. A security vulnerability exists in versions of Documenso prior to 1.8.0 that stems from the user interface misrepresenting critical information, allowing content spoofing...

rPGP 安全漏洞

rPGP is a pure Rust implementation of OpenPGP open sourced by rPGP. A security vulnerability exists in rPGP versions prior to 0.14.1. An attacker exploiting this vulnerability could trigger an rpgp crash by supplying specially crafted data...

rPGP 安全漏洞

rPGP is a pure Rust implementation of OpenPGP open sourced by rPGP. A security vulnerability exists in rPGP versions prior to 0.14.1. An attacker exploiting this vulnerability could cause resource exhaustion by providing specially crafted messages...

sigstore-java 输入验证错误漏洞

sigstore-java is a sigstore open source sigstore java client for interacting with the sigstore infrastructure. An input validation error vulnerability exists in versions of sigstore-java prior to 1.2.0, which stems from an inability to adequately validate a user if they provide an invalid signatu...

PT-2024-10115

Name of the Vulnerable Software and Affected Versions Erlang OTP versions 25.3.2.8 through 27.0 Erlang OTP version 26.2 Erlang OTP versions prior to 27.1.3 Description A regression in the ssl application of Erlang OTP causes a server or client to verify the peer even when incorrect extended key...

AZL-53978 CVE-2024-54661 affecting package socat for versions less than 1.7.4.3-2

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file...

RestApp Online Ordering System 输入验证错误漏洞

RestApp Online Ordering System is an online ordering system from RestApp, Inc. An input validation error vulnerability exists in RestApp Online Ordering System version 04.12.2024 and prior versions, which stems from incorrect input validation...

PT-2024-36009 · Unknown · Dependency-Track

Name of the Vulnerable Software and Affected Versions: Dependency-Track versions prior to 4.12.2 Description: The issue allows actors to enumerate valid names of managed users by leveraging the observable difference in request duration when performing a login request against the...

PT-2024-29024 · Joomla · Joomla Convert Forms

Name of the Vulnerable Software and Affected Versions: Joomla Convert Forms component versions prior to 4.4.8 Description: The issue is related to a Reflected Cross site scripting vulnerability in the Convert Forms component for Joomla. This vulnerability allows for the execution of malicious...

CVE-2024-49416

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...

CVE-2024-49417

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-49416

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...

Element Synapse 安全漏洞

Element Synapse is an open source Matrix Home Server implementation from Element Open Source. A security vulnerability exists in Element Synapse versions prior to 1.106 that stems from allowing an unauthenticated remote participant to trigger a remote media download and cache it to a local media...

PT-2024-16010

Name of the Vulnerable Software and Affected Versions OpenHarmony versions 4.1.1 and prior Description The issue allows a local attacker to upgrade common permissions to root through use after free. Recommendations For OpenHarmony versions 4.1.1 and prior, at the moment, there is no information...

WordPress plugin Custom Post Type to Map Store 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2024-35301 · Unknown · Infinite Slider

Name of the Vulnerable Software and Affected Versions: Infinite Slider versions prior to 2.0.1 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows reflected XSS. This problem affects the Infinite Slid...

Progress Software WhatsUp Gold 安全漏洞

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold versions prior to...

WordPress plugin WP Find Your Nearest 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...