Mozilla Firefox ESR 缓冲区错误漏洞

Mozilla Firefox ESR is an extended support version of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox ESR versions prior to 102.8, which can be exploited by attackers to cause a denial of service or execute arbitrary code...

Mozilla Firefox ESR 安全漏洞

Mozilla Firefox ESR is an extended support version of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox ESR versions prior to 102.8, which can be exploited by attackers to cause a denial of service or execute arbitrary code...

countly-server 跨站脚本漏洞

countly-server is the server-side component of Countly, a product analytics solution. A security vulnerability exists in countly-server versions prior to 21.11 that stems from a cross-site scripting vulnerability...

CVE-2023-0914

Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4...

Pixelfed 安全漏洞

Pixelfed is a free and ethical photo sharing platform from the individual developers of Pixelfed. A security vulnerability exists in Pixelfed versions prior to 0.11.4 that stems from improper authorization...

PT-2023-16603 · Pixelfed · Pixelfed

Name of the Vulnerable Software and Affected Versions: pixelfed/pixelfed versions prior to 0.11.4 Description: The issue involves exposure of sensitive information to an unauthorized actor in the GitHub repository pixelfed/pixelfed. Recommendations: For versions prior to 0.11.4, update to version...

AZL-13687 CVE-2021-33391 affecting package tidy for versions less than 5.8.0-6

An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...

SUSE CVE-2023-25734

After downloading a Windows .url shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.This bug only affects Firefox on Windows. Othe...

Delta Electronics DIAEnergie 授权问题漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics Taiwan, China used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes and maximize...

Adobe Premiere Rush Stack Buffer Overflow Vulnerability

Adobe Premiere Rush is a set of cross-platform video editing software from the U.S. company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Premiere Rush versions prior to 2.7, which stems from a boundary error when handling untrusted input. An attacker could exploit this...

PT-2023-4571 · Python +11 · Python +11

Name of the Vulnerable Software and Affected Versions: Python versions prior to 3.11.4 Description: A critical issue in the urllib.parse component of Python allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters, enabling domain filter bypass, file...

CVE-2022-30304

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiAnalyzer versions prior to 7.2.1, 7.0.4 and 6.4.8 may allow a remote unauthenticated attacker to perform a stored cross site scripting XSS attack via the URL parameter observed in the FortiWeb attack event...

PT-2023-13043 · Intel · Intel(R) Sur

Name of the Vulnerable Software and Affected Versions: IntelR SUR software versions prior to 2.4.8902 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions prior t...

CVE-2022-0637

open redirect in pollbot pollbot.services.mozilla.com in versions before 1.4.6...

PT-2023-12198 · Intel · Intel Ofu

Name of the Vulnerable Software and Affected Versions: IntelR OFU software versions prior to 14.1.28 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions prior to...

PT-2023-12852 · Intel · Intel Distribution For Python

Name of the Vulnerable Software and Affected Versions: IntelR Distribution for Python versions prior to 2022.1 for IntelR oneAPI Toolkits Description: The issue is related to an uncontrolled search path element in the IntelR Distribution for Python programming language, which may allow an...

Intel Trace Analyzer And Collector 输入验证错误漏洞

Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. A security vulnerability exists in IntelR Trace Analyzer and Collector software prior to version 2021.5 that stems from the presence of an integer...

Mozilla PollBot 输入验证错误漏洞

Mozilla PollBot is a microservice from the Mozilla Foundation. Freeing humans from the onerous task of polling for status during Firefox releases, Mozilla PollBot versions prior to 1.4.6 have an open redirect vulnerability that stems from the system not doing a reasonable job of targeting jumps,...

CVE-2023-23926

APOC Awesome Procedures on Cypher is an add-on library for Neo4j. An XML External Entity XXE vulnerability found in the apoc.import.graphml procedure of APOC core plugin prior to version 5.5.0 and 4.4.0.14 4.4 branch in Neo4j graph database. XML External Entity XXE injection occurs when the XML...

PT-2023-13425 · Intel · Intel Trace Analyzer/Collector

Name of the Vulnerable Software and Affected Versions: IntelR Trace Analyzer and Collector software versions prior to 2021.5 Description: The issue is related to an integer overflow that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendation...