10978 matches found
PT-2024-15164 · WordPress · Jsm File Get Contents() Shortcode
Name of the Vulnerable Software and Affected Versions: JSM file get contents Shortcode WordPress plugin versions prior to 2.7.1 Description: The issue concerns a lack of validation for one of the shortcode's parameters in the JSM file get contents Shortcode WordPress plugin. This could allow user...
HaoKeKeJi YiQiNiu Code Issue Vulnerability
HaoKeKeJi YiQiNiu is an application from HaoKeKeJi. A code issue vulnerability exists in HaoKeKeJi YiQiNiu version 3.1 and prior versions, which stems from a cross-site request forgery vulnerability in the httppost function of the /application/pay/controller/Api.php file...
AZL-43054 CVE-2023-6683 affecting package qemu for versions less than 8.2.0-13
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemuclipboardrequest function can be reached before vncservercuttextcaps was called and had the chance to initialize the clipboard peer, leading to a NULL pointer dereference. This could allow a maliciou...
Path traversal
A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved. Applications are only affected if they are using the ChrootO...
Rapid Software Rapid SCADA Security Vulnerability
Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA 5.8.4 and earlier versions that stems from a misconfiguration of permissions, which allows any authenticated user on the server to write...
Hongdian Router H8951-4G-ESP Trust Management Issues Vulnerability
The Hongdian Router H8951-4G-ESP is a wireless router from China Hongdian. A security vulnerability exists in versions prior to Hongdian Router H8951-4G-ESP 2310271149 that stems from the use of hard-coded passwords...
PT-2024-2680 · Mediawiki +2 · Mediawiki +2
Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.40.2 Phonos extension in MediaWiki versions prior to 1.40.2 Description: The issue exists due to the lack of protection for the web page structure in the Phonos extension of MediaWiki. This allows a remote attack...
Various GL.iNet products Security Breach
GL.iNet MT3000 and others are products of China's GL.iNet GL.iNet. GL.iNet MT3000 is an AX3000 portable router that uses the Wi-Fi 6 protocol. the GL.iNet AR750S is a router. the GL.iNet AR750 is a router. A security vulnerability exists in several GL.iNet products that originates from assigning...
Wazuh Security Breach
Wazuh is a Wazuh open source application. It is used to collect, aggregate, index and analyze security data to help organizations detect intrusions, threats and behavioral anomalies. A security vulnerability exists in Wazuh versions prior to 4.5.3 that stems from the presence of a stack overflow...
WordPress Plugin GTG Product Feed for Shopping Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
ZTE MF258 Cross-Site Scripting Vulnerability
The ZTE MF258 is a desktop router from ZTE Corporation ZTE, China. A cross-site scripting vulnerability exists in the ZTE MF258 version prior to ZTESTDV1.0.0B11, which stems from insufficient validation of SMS interface parameter inputs, resulting in a cross-site scripting attack...
PT-2024-15460 · Unknown · Ens Control
Name of the Vulnerable Software and Affected Versions: ENS Control browser extension versions prior to 10.7.0 Update 15 Description: A content-security-policy vulnerability allows a remote attacker to alter the response header parameter setting to switch the content security policy into report-on...
CVE-2024-0226
Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload...
CVE-2023-5376
An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01...
PT-2024-1333 · Intel · Intel Nuc Bios
Name of the Vulnerable Software and Affected Versions: Intel NUC BIOS firmware versions prior to IN0048 Description: The issue is related to improper input validation in the Intel NUC BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...
PT-2024-1327 · Intel · Intel Nuc P14E Laptop Element +1
Name of the Vulnerable Software and Affected Versions: Intel NUC P14E Laptop Element software installers versions prior to 1.1.45 Description: The issue is related to improper access control in Intel HotKey Services, which may allow an authenticated user to potentially enable denial of service vi...
Amazon Linux 2 : tar (ALAS-2024-2390)
The version of tar installed on the remote host is prior to 1.26-35. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2390 advisory. It was discovered that tar incorrectly handled extended attributes in PAX archives. An attacker could supply a specially crafted file a...
PT-2024-19252 · Splunk · Splunk Enterprise Security
Name of the Vulnerable Software and Affected Versions: Splunk Enterprise Security ES versions prior to 7.1.2 Description: The issue allows an attacker to perform a denial of service DoS to the Investigation by using investigation attachments. This is possible because the attachment endpoint does...
Proofpoint Enterprise Protection Security Vulnerabilities
Proofpoint Enterprise Protection is an application from Proofpoint USA. It provides the ability to protect email. A security vulnerability exists in Proofpoint Enterprise Protection versions prior to 8.20.2 patch 4809, prior to 8.20.0 patch 4805, and prior to 8.18.6 patch 4804, which stems from...