10978 matches found
CVE-2024-24017
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /common/dict/list...
OpenObserve Security Vulnerability
OpenObserve is a cloud-native observability platform open-sourced by OpenObserve. A security vulnerability exists in OpenObserve versions prior to 0.8.0 that stems from an unauthorized access vulnerability in the User Api...
PT-2024-14984
Name of the Vulnerable Software and Affected Versions MİA-MED versions prior to 1.0.7 Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, allowing authentication abuse. This vulnerability enables potential attackers to bypass authentication...
PT-2024-14988 · Media Technology · Mi̇A-Med
Name of the Vulnerable Software and Affected Versions: MİA-MED versions prior to 1.0.7 Description: The issue affects Mia Technology Inc.'s MİA-MED, allowing sensitive strings within an executable to be read. This is due to an Exposure of Data Element to Wrong Session vulnerability...
PT-2024-2747
Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.15.17 Qt versions 6.x prior to 6.2.12 Qt versions 6.3.x through 6.5.x prior to 6.5.5 Qt versions 6.6.x prior to 6.6.2 Description A buffer overflow and application crash can occur via a crafted KTX image file. The issue ...
libuv Code Issues Vulnerabilities
libuv is a cross-platform asynchronous IO library for nodejs. The platform is used to abstract IOCP for Windows and libev for Unix. currently supported features are non-blocking; TCP sockets; non-blocking named pipes; UDP; timers; child process generation; implementation of asynchronous DNS;...
CVE-2024-20824
Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent...
CVE-2023-6229
Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07...
Novel-Plus Security Vulnerability
Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. A security vulnerability exists in Novel-Plus version v4.3.0-RC1 and prior versions. An attacker can exploit the vulnerability by passing in specially crafted offset, limit, and sort parameters to perform a SQL...
PT-2024-18719 · Unknown · Libpadm.So
Name of the Vulnerable Software and Affected Versions: libpadm.so versions prior to SMR Feb-2024 Release 1 Description: The issue is an out-of-bounds write in the padmd vld htbl of libpadm.so, allowing a local attacker to execute arbitrary code. Recommendations: For versions prior to SMR Feb-2024...
PT-2024-2754 · Undici · Undici
Name of the Vulnerable Software and Affected Versions: Undici versions prior to 6.6.1 Description: The issue is related to the fetch function of the Undici HTTP/1.1 client for Node.js, which can lead to uncontrolled resource consumption. This can be exploited by a remote attacker to cause a denia...
PT-2024-18730 · Samsung · Galaxy Store
Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.63.6 Description: The issue allows local attackers to access sensitive information via implicit intent. This is due to an implicit intent hijacking vulnerability in the SamsungAccount component of the Galaxy...
WordPress plugin Affiliates Manager security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-18734 · Samsung · Samsung Gallery
Name of the Vulnerable Software and Affected Versions: Samsung Gallery versions prior to 14.5.04.4 Description: The issue is related to improper access control in Samsung Gallery, allowing physical attackers to access pictures using a physical keyboard on the lockscreen. Recommendations: For...
WordPress plugin File Manager security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
HPESBGN04590 rev.1 - HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities
Potential Security Impact: Local: Arbitrary Code Execution, Arbitrary File Modification; Remote: Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified OSS Console UOC - Prior to v3.1.1 CVSS Scores: | CVE | CVSS Vector | Base...
PT-2024-20382
Name of the Vulnerable Software and Affected Versions Stimulsoft Dashboard.JS versions prior to 2024.1.2 Description The issue allows a remote attacker to execute arbitrary code via a crafted payload to the ReportName field. This enables the attacker to perform Cross Site Scripting attacks...
WordPress plugin Views for WPForms security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2024-40157 · Github · Github-Slug-Action
Name of the Vulnerable Software and Affected Versions: github-slug-action versions prior to 1.1.1 github-slug-action versions prior to 2.1.1 Description: The issue is related to the use of set-env runner commands processed via stdout. It is recommended to upgrade to a version that uses the...
