10978 matches found
CVE-2023-4678
Divide By Zero in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2023-34391
Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths. See Instruction Manual Appendix A Cybersecurity tag dated 20230522 for more details. This issue affects...
CVE-2023-4683
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV...
Null pointer dereference
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2023-4678 Divide By Zero in gpac/gpac
Divide By Zero in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2023-4655
Cross-site Scripting XSS - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1...
PT-2023-4876 · Schweitzer Engineering Laboratories · Sel-5037 Sel Grid Configurator
Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator versions prior to 4.5.0.20 Description: The issue is related to an Execution with Unnecessary Privileges vulnerability in the SEL-5037 SEL Grid Configurator, which could allow...
PT-2023-30065 · Unknown · Instantsoft/Icms2
Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository instantsoft/icms2. This allows an attacker to trick the server into making unintended requests...
iCMS2 跨站脚本漏洞
iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A cross-site scripting vulnerability exists in iCMS2 versions prior to 2.16.1, which stems from vulnerability to reflective cross-site scripting XSS attacks...
CLSA-2023-1693418284 openssl: Fix of CVE-2023-3817
CVE-2023-3817: Add a prior check and process only correct DH keys...
PT-2023-29461 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 16.2.0 Description: An issue has been discovered in GitLab where committing directories containing an LF character results in 500 errors when viewing the commit. Recommendations: For versions prior to 16.2.0, update t...
PT-2023-25047 · Brocade · Brocade Fabric Os
Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS version 9.2.0 Brocade Fabric OS versions prior to 9.2.0 Description: The firmwaredownload command on Brocade Fabric OS could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a...
PT-2023-29923 · Bookstack · Bookstack
Name of the Vulnerable Software and Affected Versions: bookstack versions prior to v23.08 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository bookstackapp/bookstack. This allows an attacker to make unauthorized requests on behalf of the server...
PT-2023-28262 · WordPress · Poeditor
Name of the Vulnerable Software and Affected Versions: POEditor WordPress plugin versions prior to 0.9.8 Description: The issue is related to the lack of CSRF checks in various places within the plugin, allowing attackers to perform unwanted actions on logged-in admins, such as resetting the...
CVE-2023-3251
A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0...
Tenable Network Security Nessus 安全漏洞
Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. A security vulnerability exists in versions of Nessus prior to 10.6.0, which stems from a backport vulnerability that allows an authenticated remote attacker with administrator...
Tenable Network Security Nessus 安全漏洞
Tenable Network Security Nessus is an open source system vulnerability scanner from US-based Tenable Network Security. A security vulnerability exists in versions of Tenable Network Security Nessus prior to 10.6.0, which stems from an incorrect authorization vulnerability that allows an...
CVE-2022-46783
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book...