10978 matches found
TamronOS 操作系统命令注入漏洞
TamronOS is an IPTV system from China's TamronOS. An OS command injection vulnerability exists in TamronOS versions prior to 20230703, which stems from an incorrect manipulation of the host parameter resulting in OS command injection...
PT-2023-25221 · Teampass · Teampass
Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.10 Description: The issue is related to Code Injection in the GitHub repository nilsteampassnet/teampass. Recommendations: For versions prior to 3.0.10, update to version 3.0.10 or later to resolve the issue...
PT-2023-25223 · Teampass · Teampass
Name of the Vulnerable Software and Affected Versions: TeamPass versions prior to 3.0.10 Description: The issue allows unauthenticated actors to view application-specific and user data and files by viewing an endpoint directory listing, resulting in the exposure of sensitive information to...
TeamPass 代码注入漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A code injection vulnerability exists in versions prior to TeamPass 3.0.10. An attacker could exploit this vulnerability to perform a code injection attack...
CVE-2023-30671
Logic error in package installation via adb command prior to SMR Jul-2023 Release 1 allows local attackers to downgrade installed application...
CVE-2023-30666
Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write...
CVE-2023-3521 Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling
Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...
PT-2023-22857 · Unknown · Uwbaospadapterservice
Name of the Vulnerable Software and Affected Versions: UwbAospAdapterService versions prior to SMR Jul-2023 Release 1 Description: The issue allows local attackers to access the UWB chipset Identifier due to an Exposure of Sensitive Information vulnerability in the getChipInfos function...
Open redirect
Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4...
Progress Software MOVEit Transfer 安全漏洞
Progress Software MOVEit Transfer is an automated file transfer software from Progress Software, USA. The software supports file transfers and provides file transfer activity monitoring. A security vulnerability exists in Progress Software MOVEit Transfer that originates from allowing an attacker...
PT-2023-25704 · Kanboard +1 · Kanboard +1
Name of the Vulnerable Software and Affected Versions: Kanboard versions prior to 1.2.31 Description: Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31, an authenticated user is able to perform a SQL Injection, leading to a privilege...
Fides 路径遍历漏洞
Fides is an open source privacy engineering platform for managing the implementation of data privacy requests in the runtime environment and the enforcement of privacy regulations in code. A path traversal vulnerability exists in Fides versions prior to 2.15.1, which stems from the presence of a...
Pandoc 输入验证错误漏洞
Pandoc is a Haskell library for converting from one markup format to another, as well as command line tools that use the library. An input validation error vulnerability exists in Pandoc versions 1.13 through prior to 3.1.4, which stems from vulnerability to an arbitrary file write vulnerability...
PT-2023-4145 · Mozilla · Firefox
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 115 Description: The issue is related to insufficient input validation, which can lead to a denial-of-service DoS attack by a remote attacker. Specifically, the session restore helper crashes when no paramete...
PT-2023-4535
Name of the Vulnerable Software and Affected Versions Nullsoft Scriptable Install System NSIS versions prior to 3.09 Description The issue is related to insufficient access control in the Nullsoft Scriptable Install System, which can be exploited by a remote attacker to elevate their privileges...
Google Chrome 缓冲区错误漏洞
Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome versions prior to 114.0.5735.90, which stems from an out-of-bounds read issue. An attacker could exploit this vulnerability to cause a denial of service on the system...
2FAuth 跨站脚本漏洞
2FAuth is a web application used to manage two-factor authentication 2FA accounts and generate their security code. A cross-site scripting vulnerability exists in 2FAuth versions prior to v4.0.3, which stems from the fact that it is possible to cause cross-site scripting via the account/service...
PT-2023-3386 · Unknown · Tn-5900 Series
Name of the Vulnerable Software and Affected Versions: TN-5900 Series versions 3.3 and prior Description: The issue allows a remote attacker to determine whether a user is valid during password recovery through the web login page, potentially enabling a brute force attack with valid users. This i...
