The vulnerability of the gf_hinter_track_process function in the isom_hinter_track_process.c component of the multimedia platform GPAC allows a intruder to access confidential data and also trigger a service failure.

The vulnerability of the gfhintertrackprocess function in the isomhintertrackprocess.c component of the multimedia platform GPAC is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause a service...

Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Windows

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2022-22594: Origin Validation Error

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information...

CVE-2021-25003

The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE...

CVE-2021-25003

The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE...

Design/Logic Flaw

The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE...

CVE-2021-25003

The CVE-2021-25003 vulnerability affects WordPress WPCargo Track & Trace plugin prior to version 6.9.0. A crafted file in the plugin can allow an unauthenticated attacker to write a PHP file anywhere on the web server, enabling remote code execution (RCE). The issue is documented as unauthenticat...

PT-2022-9560 · Unknown · Wpcargo Track & Trace

Name of the Vulnerable Software and Affected Versions: WPCargo Track & Trace versions prior to 6.9.0 Description: The issue allows unauthenticated attackers to write a PHP file anywhere on the web server, leading to remote code execution RCE. Recommendations: For versions prior to 6.9.0, update t...

CVE-2021-25003: Improper Control of Generation of Code

The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE...

WordPress plugin WPCargo Track & Trace 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

Vulnerabilities fixed in BMC Track-It!

BMC has fixed several vulnerabilities in Track-It! A malicious party could exploit the vulnerabilities to gain access to the application or to execute arbitrary code under the application's privileges. The vulnerability with reference CVE-2022-24047 involves an "authentication bypass" that allows...

CVE-2022-24047

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

CVE-2022-24047

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

CVE-2022-24047

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

CVE-2022-24047

CVE-2022-24047 affects BMC Track-It! 20.21.01.102 where an HTTP authorization flaw permits remote authentication bypass without credentials. Root cause: lack of authentication prior to accessing functionality, enabling an unauthenticated attacker to bypass login. Multiple sources (including ZDI-2...

CVE-2022-24047: Authentication Bypass Using an Alternate Path or Channel

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

Track-It! 授权问题漏洞

Bmc Software Track-It! is an It helpdesk software from Bmc Software, USA. for helpdesks and service desks with asset management. A security vulnerability exists in BMC Track-It! that stems from a lack of authentication before allowing access to features. An attacker could exploit this vulnerabili...

BMC Track-It! HTTP Module Improper Access Control Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It!. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of authentication prior...

IBM Financial Transaction Manager Authorization Issue Vulnerability (CNVD-2022-08965)

IBM Financial Transaction Manager is a financial transaction manager from IBM Corporation in the United States. The product is primarily used to monitor, track and report financial payments and transactions. IBM Financial Transaction Manager 3.2.4 contains an authorization issue vulnerability tha...