645 matches found
PT-2024-5385 · D Link · D-Link Di-8100
Name of the Vulnerable Software and Affected Versions: D-Link DI-8100 version 16.07 Description: A critical issue has been found in the function msp info htm of the file msp info.htm, related to inadequate data sanitization on the management level when processing the cmd parameter. This can lead ...
CVE-2024-4811
In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifacts...
CVE-2024-4811
In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifacts...
The vulnerability of Reposilite repository management software lies in the improper limitation of the path to the restricted access catalog, allowing attackers to execute arbitrary code.
The vulnerability of the Reposilite repository management software is related to incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created package...
CVE-2024-5973
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have...
PT-2024-28718 · Unknown +1 · Opensearch +1
Name of the Vulnerable Software and Affected Versions: OpenSearch versions prior to 2.14 Description: An issue in the OpenSearch reporting plugin allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when accessi...
PT-2024-29006 · Netbox · Netbox
Name of the Vulnerable Software and Affected Versions: netbox version 4.0.3 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at "/dcim/interfaces/add/". Recommendations: For netbox versio...
PT-2024-28343 · Unknown · Ifood Order Manager
Name of the Vulnerable Software and Affected Versions: ifood Order Manager version 3.35.5 Description: An issue in ifood Order Manager allows attackers to execute arbitrary code via a DLL hijacking attack. Recommendations: For ifood Order Manager version 3.35.5, consider restricting access to the...
PT-2024-27802 · Unknown · Itsourcecode Payroll Management System Project In Php With Source Code
Name of the Vulnerable Software and Affected Versions: Itsourcecode Payroll Management System Project In PHP With Source Code version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the view payslip.php file. This enables attackers to...
The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise allows a hacker to read arbitrary files.
The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise relates to an incorrect restriction on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotely...
PT-2024-37569 · Wbw · The Product Table
Name of the Vulnerable Software and Affected Versions: The Product Table by WBW plugin for WordPress version 2.0.1 and earlier Description: The issue is related to Remote Code Execution due to missing authorization and lack of sanitization of appended data in the languages/customTitle.php file...
The vulnerability of the Atril program for viewing multi-page documents relates to the possibility of bypassing restricted access catalogs, allowing a intruder to write arbitrary files.
The vulnerability of the Atril application for viewing multi-page documents relates to the possibility of bypassing a restricted-access catalog. Exploiting this vulnerability could allow an intruder to write arbitrary files...
PT-2024-24827 · Johnson Controls · Kt1 +2
Name of the Vulnerable Software and Affected Versions: KT1, KT2, and KT400 controllers affected versions not specified Description: The issue concerns the broadcasting of sensitive information when the controller is in factory reset mode. Specifically, the controller broadcasts its MAC address,...
PT-2024-37626 · Sourcecodester · Sourcecodester Home Owners Collection Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Home Owners Collection Management System version 1.0 Description: A critical issue affects the processing of the file /classes/Users.php?f=save, allowing unrestricted upload through the manipulation of the img argument. This ca...
PT-2024-8678 · FFmpeg · Ffmpeg
Name of the Vulnerable Software and Affected Versions: FFmpeg version 7.0 Description: The issue is related to a heap-buffer-overflow in the copy column function of the libavfilter/vf tiltandshift.c file in the FFmpeg multimedia library. This can allow an attacker to execute arbitrary code...
PT-2024-37609 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: A critical issue has been found in SeaCMS, affecting an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the cid argument with a specific input leads to SQL injection...
PT-2024-31195
Name of the Vulnerable Software and Affected Versions zenml-io/zenml version 0.56.3 Description A denial of service issue exists due to improper handling of line feed characters in component names. When a low-privileged user adds a component through the API endpoint...
PT-2024-27086 · Decentralizejustice +1 · Decentralizejustice/Anonbackend +2
Name of the Vulnerable Software and Affected Versions: Annonshop.app versions 2b2b4 through ba9fd DecentralizeJustice/anonymousLocker versions 2b2b4 through ba9fd DecentralizeJustice/anonBackend versions 57837 through cd815 Description: An issue was discovered in the specified commits of...
CVE-2024-36265 Apache Submarine Server Core: authorization bypass
UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. An attacker can bypass authentication by sending specially crafted REST requests. As this project is retired, we do not plan to release a...
