6744 matches found
D-Link DNS-320 命令注入漏洞
D-Link DNS-320 is a NAS Network Attached Storage device from China's AUO D-Link. A command injection vulnerability exists in the D-Link DNS-320L, which originates from a command injection vulnerability in the file /cgi-bin/nassharing.cgi. Affected products and versions: D-Link DNS-320L, DNS-325,...
编号撤回
Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. This CVE number has been withdrawn...
Esri Portal For ArcGIS 安全漏洞
Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal For ArcGIS that stems from the presence...
编号撤回
Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. This CVE number has been withdrawn...
Esri Portal For ArcGIS 跨站脚本漏洞
Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A cross-site scripting vulnerability exists in Esri Portal For ArcGIS that stems from vulnerability to cross-site scripting attac...
编号撤回
Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. This CVE number has been withdrawn...
编号撤回
Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. This CVE number has been withdrawn...
D-Link DNS-320 信任管理问题漏洞
The D-Link DNS-320 is a NAS Network Attached Storage device from China's Terasic D-Link Corporation. A trust management issue vulnerability exists in the D-Link DNS-320L, which originates from a trust management issue vulnerability in the file /cgi-bin/nassharing.cgi. Affected products and...
Esri Portal For ArcGIS 安全漏洞
Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal For ArcGIS that stems from the presence of a cross-site scripting vulnerability...
Esri Portal For ArcGIS 安全漏洞
Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal For ArcGIS that stems from the presence of a cross-site scripting vulnerability...
Westermo Lynx 206-F2G Permissive Cross-Domain Policy with Untrusted Domains (CVE-2023-45213)
A potential attacker with access to the device would be able to execute malicious code that could affect the correct functioning of the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Cross-Origin Resource Sharing (CORS) Bypass
@kindspells/astro-shield is vulnerable to Cross-Origin Resource Sharing CORS Bypass. This vulnerability due to the introduction of valid integrity attributes to injected code and SRI hash added to the generated Content Security Policy CSP header, fooling the browser into believing that the inject...
Some of the Most Popular Websites Share Your Data With Over 1,500 Companies
Cookie pop-ups now show the number of “partners” that websites may share data with. Here's how many of these third-party companies may get your data from some of the most popular sites online...
PYSEC-2024-326
vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. The vantage6 server has no restrictions on CORS settings. It should be possible for people to set the allowed origins of the server. The impa...
ALPINE-CVE-2023-38575
Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2023-38575
Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
DEBIAN-CVE-2023-38575
Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2023-38575
Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2023-38575
Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2024-0311
creationtimestamp| type| source ---|---|--- 2024-03-14 10:26:55+00:00| seen| https://t.me/ctinow/207597 2024-03-14 10:27:01+00:00| seen| https://t.me/ctinow/207604 2024-10-30 16:18:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8894 2024-10-31 15:27:18+00:00|...