10978 matches found
CVE-2024-0321 Stack-based Buffer Overflow in gpac/gpac
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...
PT-2024-14982 · WordPress · Migrate Wordpress Website & Backups
Name of the Vulnerable Software and Affected Versions: Migrate WordPress Website & Backups WordPress plugin versions prior to 1.9.3 Description: The issue concerns the Migrate WordPress Website & Backups WordPress plugin, which does not prevent directory listing in sensitive directories containin...
PT-2024-14886 · WordPress · Essential Real Estate
Name of the Vulnerable Software and Affected Versions: The Essential Real Estate WordPress plugin versions prior to 4.4.0 Description: The issue arises from the plugin not applying proper capability checks on its AJAX actions. This allows attackers with a subscriber account to conduct Denial of...
PT-2024-18996 · Xwiki · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.10.17 XWiki Platform versions prior to 15.5.3 XWiki Platform versions prior to 15.8-rc-1 Description: The XWiki Platform is a generic wiki platform offering runtime services for applications built on top of...
QNAP Systems QcalAgent Operating System Command Injection Vulnerability
QNAP Systems QcalAgent is a time management center from QNAP Systems. It is used to manage personal schedules, share calendars with others, and share each other's schedules. A security vulnerability exists in QNAP Systems QcalAgent prior to version 1.1.8 that stems from the presence of an operati...
PT-2024-12935 · Qcalagent · Qcalagent
Name of the Vulnerable Software and Affected Versions: QcalAgent versions prior to 1.1.8 Description: An OS command injection issue has been reported, potentially allowing authenticated users to execute commands via a network. Recommendations: For versions prior to 1.1.8, update to QcalAgent...
SAMSUNG mobile devices security vulnerability
SAMSUNG mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG mobile devices SMR Jan-2024 Release 1 version and prior versions, which stems from an improper access...
PT-2024-18712 · Samsung · Samsung Mobile Devices
Name of the Vulnerable Software and Affected Versions: Samsung Mobile Devices versions prior to SMR Jan-2024 Release 1 Description: The issue is related to improper access control in the Notification service, allowing a local attacker to access notification data. Recommendations: For versions pri...
httparty Security Vulnerabilities
httparty is a library by the individual developer John Nunemaker. A security vulnerability exists in httparty versions prior to 0.21.0, which stems from a lack of escaping of the Content-Disposition filename in httparty, leading to request tampering...
PYSEC-2024-129
FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...
PT-2024-14516 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: A heap buffer overflow flaw exists in the paddle.repeat interleave function. This issue can lead to a denial of service, information disclosure, or potentially more severe damage...
PT-2024-12757 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: This issue can cause a runtime crash and a denial of service. It is related to a flaw in the paddle.linalg.matrix rank function. Recommendations: For versions prior to 2.6.0, update to version...
PT-2024-14514 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a stack overflow in paddle.linalg.lu unpack that can lead to a denial of service or potentially more severe consequences. Recommendations: For versions prior to 2.6.0, update to...
CubeFS Security Vulnerability
CubeFS is a cloud-native file storage for CubeFS individual developers. A security vulnerability exists in CubeFS versions prior to 3.3.1. An attacker can steal user passwords by exploiting the vulnerability...
Tiny Technologies TinyMCE Cross-Site Scripting Vulnerability
Tiny Technologies TinyMCE is a rich text editor from Tiny Technologies, USA. A cross-site scripting vulnerability exists in TinyMCE versions prior to 5.10.0 that could allow an attacker to execute arbitrary JavaScript when updating an image or link with a specially crafted URL...
ZTE ZXCLOUD iRAI Code Issue Vulnerability
The ZTE ZXCLOUD iRAI is a virtualization device from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCLOUD iRAI version 7.23.23 and prior versions, which stems from the program's inability to adequately validate user input. An attacker can exploit the vulnerability to elevate...
PT-2024-14518 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a command injection in the wget download function, allowing the execution of arbitrary commands on the operating system. Recommendations: For versions prior to 2.6.0, update to...
PT-2024-1026 · Google +4 · Google Chrome +4
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.199 Description: The issue is related to a use after free vulnerability in the WebAudio component of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a...
