2080 matches found
PT-2025-18318 · Xwiki · Xwiki
Name of the Vulnerable Software and Affected Versions: XWiki versions 15.3-rc-1 through 15.10.14 XWiki versions 16.0.0-rc-1 through 16.4.6 XWiki versions 16.5.0-rc-1 through 16.10.0-rc-1 Description: The issue allows a user with access to pages in the XWiki space to access the...
PT-2024-29998
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description This issue could be exploited, leading to unauthorized disclosure of information to authenticated users. There is no information provided about the...
CVE-2024-49214
QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a spoofed IP address. This can bypass the IP allow/block list functionality...
PT-2024-39928 · 07Flycrm +1 · 07Flycrm +1
Name of the Vulnerable Software and Affected Versions: 07FLYCMS versions up to 1.2.0 07FLY-CMS versions up to 1.2.0 07FlyCRM versions up to 1.2.0 Description: A critical vulnerability was found in the affected products, which affects the pictureUpload function of the file /admin/File/pictureUploa...
CVE-2024-47491
An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause Denial of Service DoS. When a BGP UPDATE with malformed path attribute is received over an...
CVE-2024-47489 Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE
An Improper Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine pfe of the Juniper Networks Junos OS Evolved on ACX Series devices allows an unauthenticated, network based attacker sending specific transit protocol traffic to cause a partial Denial of Service DoS to...
PT-2024-39890 · 07Flycms +1 · 07Flycms +1
Name of the Vulnerable Software and Affected Versions: 07FLYCMS version 1.3.8 07FLY-CMS version 1.3.8 07FlyCRM version 1.3.8 Description: A critical issue was found in the uploadFile function of the Module Plug-In Handler component, located in the file...
PT-2024-32656 · Xerox · Freeflow Core
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A remote code execution RCE issue exists due to path traversal before authentication, allowing for pre-authentication remote code execution...
CVE-2024-45965
Contao before 5.5.6 allows XSS via an SVG document. This affects in contao/core-bundle in Composer 4.x before 4.13.54, 5.0.x through 5.3.x before 5.3.30, and 5.4.x and 5.5..x before 5.5.6...
PT-2024-39542 · Tp Link · Tp-Link Tl-Wr841Nd
Name of the Vulnerable Software and Affected Versions: TP-LINK TL-WR841ND versions up to 20240920 Description: A critical issue affects some unknown functionality of the file /userRpm/popupSiteSurveyRpm.htm. The manipulation of the ssid argument leads to a stack-based buffer overflow. This issue...
CVE-2024-46644
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via editfile...
PT-2024-31580 · Unknown · Welcart E-Commerce
Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions prior to 2.11.2 Description: The issue allows for cross-site scripting, which can lead to the execution of an arbitrary script on the user's web browser if exploited. Recommendations: For versions prior to 2.11.2,...
CVE-2024-23906
Improper Neutralization of Input During Web Page Generation CWE-79 in the Controller 6000 and Controller 7000 diagnostic webpage allows an attacker to modify Controller configuration during an authenticated Operator's session. This issue affects: Controller 6000 and Controller 7000 9.10 prior to...
CVE-2024-45492
An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms where UINTMAX equals SIZEMAX...
PT-2025-25439 · Xwiki · Xwiki
Name of the Vulnerable Software and Affected Versions: XWiki versions prior to 15.10.16 XWiki versions prior to 16.4.7 XWiki versions prior to 16.10.2 Description: The issue arises when a user without script rights creates a document containing an XWiki.Notifications.Code.NotificationDisplayerCla...
PT-2024-28667 · Qbic · Qbic Cloud Cc-2L
Name of the Vulnerable Software and Affected Versions: QBiC CLOUD CC-2L versions 1.1.30 and earlier Safie One versions 1.8.2 and earlier Description: The issue is related to improper certificate validation, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter...
[20250103] - Core - Read ACL violation in multiple core views
Improper Access Controls allows access to protected views...
CVE-2024-32501
A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23...
BIT-NGINX-2024-7347 NGINX MP4 module vulnerability
NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngxhttpmp4module and the mp4 directi...
