10978 matches found
LinkStack Code Issues Vulnerabilities
LinkStack is a unique platform from LinkStack Open Source that provides an efficient solution for managing and sharing links online. A code issue vulnerability exists in versions prior to LinkStack v4.2.9 that stems from an insufficient setting of the session expiration time after a password chan...
PT-2023-32342
Name of the Vulnerable Software and Affected Versions TRtek Software Education Portal versions prior to 3.2023.29 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
PT-2023-30232 · Sugarcrm · Sugarcrm
Name of the Vulnerable Software and Affected Versions: SugarCRM versions prior to 12.0.4 SugarCRM versions prior to 13.0.2 Description: A Server Site Template Injection SSTI issue has been identified in the GecControl action, allowing custom PHP code injection via the GetControl action due to...
openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0325-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0325-1 advisory. - Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...
PT-2023-8754 · Moxa · Moxa Nport W2150A/W2250A Series
Name of the Vulnerable Software and Affected Versions: Moxa NPort W2150A/W2250A Series firmware versions prior to 2.3 Description: The issue is related to a stack-based buffer overflow in the built-in web server of the Moxa NPort W2150A/W2250A Series. This can be exploited by a remote attacker...
CVE-2023-26583
Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...
Design/Logic Flaw
When installing a package from a Mercurial VCS URL ie "pip install hg+..." with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call ie "--config". Controlling the Mercurial configuration can modify how and which...
PT-2023-8352 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 Description: The issue is related to insufficient access control in the LaunchServices component of the macOS operating system, which may allow an app to access sensitive user data. The issue was addressed with...
era-compiler-vyper security vulnerability
era-compiler-vyper is the EraVM Vyper compiler. A security vulnerability exists in versions of era-compiler-vyper prior to 1.3.10, which stems from the presence of a memory issue...
Ubiquiti UniFi Network Security Breach
Ubiquiti UniFi Network is a wireless network management software solution from Ubiquiti, Inc. It is used to set up and manage UniFi Network devices. A security vulnerability exists in Ubiquiti UniFi Network version 7.5.176 and prior versions that stems from incorrect access control logic...
Fides Code Issues Vulnerabilities
Fides is an open source privacy engineering platform for managing the implementation of data privacy requests in a runtime environment and the enforcement of privacy regulations in code. A security vulnerability exists in versions of Fides prior to 2.22.1 that stems from allowing custom...
PT-2023-23093 · Unknown · Gotham Orbital-Simulator
Name of the Vulnerable Software and Affected Versions: Gotham Orbital-Simulator service versions prior to 0.692.0 Description: The issue allows an unauthenticated user to read arbitrary files on the file system due to a Path traversal problem. Recommendations: For versions prior to 0.692.0, updat...
Mozilla Firefox Buffer Error Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 119. An attacker can exploit the vulnerability to execute arbitrary code...
PT-2023-29858
Name of the Vulnerable Software and Affected Versions Fides versions prior to 2.22.1 Description The Fides webserver API allows users to retrieve its configuration using the GET api/v1/config endpoint. The configuration data is filtered to suppress most sensitive configuration information before ...
PT-2023-29866 · Cryptoes · Cryptoes
Name of the Vulnerable Software and Affected Versions: CryptoES versions prior to 2.1.0 Description: The CryptoES PBKDF2 is weaker than originally specified and current industry standards due to defaulting to SHA1 and a single iteration. This weakness can lead to high-impact issues if used for...
Zscaler Client Connector Security Vulnerability
Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...
JVN#02058996: HP ThinUpdate vulnerable to improper server certificate verification
HP ThinUpdate provided by HP Development Company, L.P. is vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication or alter the communication. Solution Update the Software Update the software...
Zscaler Client Connector Code Issue Vulnerability
Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...
CVE-2023-46298
Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN...
