10979 matches found
CVE-2023-2566 Cross-site Scripting (XSS) - Stored in openemr/openemr
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...
JINS MEME CORE 信任管理问题漏洞
JINS MEME is a series of smart glasses from the Japanese company JINS. A security vulnerability exists in JINS MEME CORE version 2.2.0 and prior versions. An attacker could exploit the vulnerability to obtain sensitive data...
PT-2023-21464 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: An out-of-bounds write issue was addressed with improved bounds checking, allowing an app to potentially execute arbitrary code with kernel privileges. Recommendations: For...
CVE-2023-2566
OpenEMR CVE-2023-2566 is a stored XSS vulnerability affecting OpenEMR prior to version 7.0.1. Public sources describe the issue as arising from insufficient input filtering/escaping that allows injection of web payloads via user-supplied data in the web application. The vulnerability is categoriz...
Apache Airflow 安全漏洞
Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An elevation of privilege vulnerability exists in Apache Airflow versions prior to...
CVE-2023-2427
Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13...
AZL-26408 CVE-2023-29941 affecting package llvm16 for versions less than 16.0.0-4
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOpmlir::sparsetensor::SortOp...
phpMyFAQ 跨站脚本漏洞
phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.1.13, which can be exploited by attackers to steal user cookies...
bumsys 安全漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. A security vulnerability exists in versions of bumsys prior to 2.2.0, which originates from an externally controlled file name or path...
CVE-2023-2550 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...
CVE-2023-2516 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
Rancher 安全漏洞
Rancher Labs Rancher is a suite of open source, enterprise-grade container management platforms from US-based Rancher Labs. A security vulnerability exists in versions prior to Rancher 2.7.3, which stems from the presence of a mismanagement of privileges vulnerability that allows elevation of...
Amazon Linux AMI : openldap (ALAS-2023-1741)
The version of openldap installed on the remote host is prior to 2.4.40-16.36. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1741 advisory. An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and...
CISA Issues Advisory on Critical RCE Affecting ME RTU Remote Terminal Units
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday released an Industrial Control Systems ICS advisory about a critical flaw affecting ME RTU remote terminal units. The security vulnerability, tracked as CVE-2023-2131, has received the highest severity rating of 10.0 on the...
CVE-2023-2459
Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML page. Chromium security severity: Medium...
Appium Desktop 操作系统命令注入漏洞
Appium Desktop is the graphical interface to Appium Server from Appium. An operating system command injection vulnerability exists in versions prior to Appium Desktop v1.22.3-4. An attacker could exploit this vulnerability to perform an OS command injection attack...
Amazon Linux 2 : openldap (ALAS-2023-2033)
The version of openldap installed on the remote host is prior to 2.4.44-25. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2033 advisory. An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relyi...
Zyxel NBG-418N v2 安全漏洞
The Zyxel NBG-418N v2 is a wireless router from China Hopkins Zyxel. A security vulnerability exists in the Zyxel NBG-418N v2 firmware version prior to V1.00. An attacker could exploit this vulnerability to cause a buffer overflow...
phpMyFAQ 访问控制错误漏洞
phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. An access control error vulnerability exists in versions prior to phpMyFAQ 3.1.13, which stems from improper access control...