12032 matches found
GO-2023-1857 Panic when parsing ranges with invalid masks in github.com/malfunkt/iprange
Parsing a range with a mask larger than 32 bits causes a panic...
Atlas Business Directory Listing 2.13 Cross Site Scripting
Exploit Title: Atlas Business Directory Listing 2.13 - Reflected XSS Exploit Author: CraCkEr Date: 09/07/2023 Vendor: Creativeitem Vendor Homepage: https://creativeitem.com/ Software Link: https://demo.creativeitem.com/atlas/ Tested on: Windows 10 Pro Impact: Manipulate the content of the site...
GHSA-MRR8-V49W-3333 sweetalert2 contains potentially undesirable behavior
sweetalert2 versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme...
K000135433: WPA use-after-free vulnerability CVE-2021-27803
Security Advisory Description A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could result in denial of service or other impact potentially execution of arbitrary code, for an attacker within radio range...
PT-2023-25776 · Chamilo · Chamilo
Name of the Vulnerable Software and Affected Versions: Chamilo versions 1.11.x up to 1.11.20 Description: The issue allows users with admin privilege accounts to insert XSS in the careers and promotions management section. This can potentially lead to malicious script execution. Recommendations:...
PT-2023-25865 · Microsoft +3 · Azure +3
Name of the Vulnerable Software and Affected Versions: OpenComputers versions 1.2.0 through 1.8.3 Description: This issue affects OpenComputers with the Internet Card feature enabled, allowing players to gain access to sensitive information exposed via metadata services' API endpoints, such as...
PT-2023-3898 · Unknown · Pnp4Nagios
Name of the Vulnerable Software and Affected Versions: PNP4Nagios versions 0.6.26 through 81ebfc5 Description: The issue is related to stored XSS in the AJAX controller via the basket API and filters. This can be exploited by a remote attacker to perform cross-site scripting attacks. The...
UBUNTU-CVE-2023-35939
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incorrect rights check on a on a file accessible by an authenticated user or not for certain actions, allows a threat actor to interact, modify, or see Dashboard data. Version 10.0.8...
PT-2023-24677 · Glpi +2 · Glpi +2
Name of the Vulnerable Software and Affected Versions: GLPI versions 0.68 through 10.0.7 Description: The issue is related to an incorrect rights check on a file accessible by an authenticated user, allowing access to the list of all users and their personal information. Users should upgrade to...
PT-2023-4275 · Glpi +2 · Glpi +2
Name of the Vulnerable Software and Affected Versions: GLPI versions 10.0.0 through 10.0.7 Description: The issue is related to a SQL injection attack that can be driven through the GLPI inventory endpoint, which by default requires no authentication. This allows a remote attacker to execute...
CVE-2023-22387 Use of Out-of-range Pointer Offset in Qualcomm IPC
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption...
CVE-2022-4143
An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab versions prior to 15.10 to 16.1, whi...
CVE-2022-48334
Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys totallen+filenamelen integer overflow and resultant buffer overflow...
CVE-2022-25883
...
SUSE CVE-2022-25883
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...
DATEV eG Personal-Management System 跨站脚本漏洞
DATEV eG Personal-Management System is a personnel management system from DATEV, Inc. A security vulnerability exists in DATEV eG Personal-Management System Comfort/Comfort Plus versions v15.1.0 through v16.1.1. An attacker could exploit the vulnerability by sending a specially crafted link to...
PT-2023-22051 · Ibm · Ibm Spectrum Protect Backup-Archive Client
Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Backup-Archive Client versions 8.1.0.0 through 8.1.17.2 Description: The issue allows a local user to escalate their privileges due to improper access controls. Recommendations: For versions 8.1.0.0 through 8.1.17.2, upda...
