PT-2023-16168 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts...

PT-2023-16169 · Thorsten · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Reflected. This is a type of security vulnerability that occurs when an application takes user input and sends it back to the user...

CVE-2023-0312 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

alf.io 跨站脚本漏洞

alf.io is open source ticket reservation system. A cross-site scripting vulnerability exists in versions prior to alf.io 2.0-M4-2301 that stems from the presence of cross-site scripting XSS...

CVE-2023-0300 Cross-site Scripting (XSS) - Reflected in alfio-event/alf.io

Cross-site Scripting XSS - Reflected in GitHub repository alfio-event/alf.io prior to 2.0-M4-2301...

CVE-2023-0288

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

AZL-12990 CVE-2023-0288 affecting package vim for versions less than 9.0.1189-1

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

CVE-2022-4616

The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page. This vulnerability could allow a remote unauthenticated user to add files, delete files, and change file permissions...

PT-2023-12265 · Johnson Controls · Metasys Ads/Adx/Oas

Name of the Vulnerable Software and Affected Versions: Johnson Controls Metasys ADS/ADX/OAS versions prior to 10.1.6 Johnson Controls Metasys ADS/ADX/OAS versions prior to 11.0.3 Description: An Insufficiently Protected Credentials issue allows API calls to expose credentials in plain text under...

CVE-2023-0288

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

PT-2023-1614 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.8 Description: The issue is related to a use-after-free in the run unpack function in the fs/ntfs3/run.c component of the Linux kernel. This occurs due to a difference between NTFS sector size and media sect...

PT-2023-15652 · Technitium · Technitium Dns Server

Name of the Vulnerable Software and Affected Versions: Technitium DNS Server versions prior to 10.0 Description: The issue allows a self-CNAME denial-of-service attack. This occurs when a CNAME loop causes an answer to contain hundreds of records. Recommendations: For versions prior to 10.0, upda...

Flarum 安全漏洞

Flarum is an open source forum system for the Flarum community. A security vulnerability exists in versions prior to Flarum v1.6.3 that stems from discussions that would open uncontrolled spam or unintentional replies...

CVE-2023-0289 Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar

Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...

AZL-13049 CVE-2023-23454 affecting package hyperv-daemons for versions less than 5.15.87.1-1

cbqclassify in net/sched/schcbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service slab-out-of-bounds read because of type confusion non-negative numbers can sometimes indicate a TCACTSHOT condition rather than valid classification results...

PT-2023-6856 · Delta · Delta Dx-3021

Name of the Vulnerable Software and Affected Versions: Delta DX-3021 versions prior to 1.24 Description: The webserver in Delta DX-3021 is vulnerable to command injection through the network diagnosis page. This issue could allow a remote unauthenticated user to add files, delete files, and chang...

CVE-2022-43390

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15ACCC.3C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request...

PT-2023-15650 · Nostromo · Nostromo

Name of the Vulnerable Software and Affected Versions: Nostromo versions prior to 2.1 Description: The issue allows an attacker to execute arbitrary commands on the remote server due to a path traversal vulnerability. This occurs when the homedirs option is used. Recommendations: For versions pri...

Google Chrome Security Update (stable-channel-update-for-desktop-2023-01) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an improperly implemented permission prompt, which can be exploited by a remote attacker to bypass the Primary Source Permission Delegation via a crafted HTML page, and affects the...