12895 matches found
7-Zip Security Vulnerabilities
7-Zip is a compression software. A security vulnerability exists in versions prior to 7-Zip 24.01, which stems from an out-of-bounds read vulnerability in the NtfsHandler.cpp NTFS handler program that allows an attacker to read more than the expected buffer...
CVE-2024-5865
Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary files reading outside the web publish directory. Versions 23.1-HF7 and on have the patch...
CVE-2024-6172
The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.25 due to insufficient escaping on the user supplied...
PT-2024-27736 · Machform · Machform
Name of the Vulnerable Software and Affected Versions: MachForm versions prior to 20 Description: The issue is an authenticated stored cross-site scripting problem. Recommendations: For versions prior to 20, update to version 20 or later to resolve the issue...
PT-2024-27737 · Machform · Machform
Name of the Vulnerable Software and Affected Versions: Machform versions prior to 20 Description: The issue is related to an authenticated Blind SQL injection in the user account settings page. Recommendations: For versions prior to 20, update to version 20 or later to resolve the issue...
The permission model protects itself against path traversal attacks by calling path.resolve() on any paths given by the user. If the path is to be treated as a Buffer the implementation uses Buffer.from() to obtain a Buffer from the result of path.resolve(). By monkey-patching Buffer internals namely Buffer.prototype.utf8Write the application can modify the result of path.resolve() which leads to a path traversal vulnerability. This vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21. Please note that at the time this CVE was issued the permission model is an experimental feature of Node.js.
...
PT-2024-6322 · Ivanti · Ivanti Epm
Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2022 SU6 Ivanti EPM versions prior to the 2024 September update Description: The issue is related to an External XML Entity XXE vulnerability in the provisioning web service, allowing a remote unauthenticated...
Malicious code in updated-tricks-v-bucks-generator-free_2023-pdts (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in updated-tricks-v-bucks-generator-free_2023-glcy (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_zgkyn (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in summoners-war-latest-tool-2023 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_plka9 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in new_tricks_new-updated-psn_gift_generator_free_2023_no_human_today_opdasf (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in john-wick-4-2023-pelicula-completa-espa-ol-spanish--march-28 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in cash-app-money-generator-new-updated-2023-wosk-h8cz (npm)
--- -= Per source details. Do not edit below this line.=-...
PT-2024-5561 · Juniper Networks · Junos Evolved
Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions 23.2R2-EVO through 23.2R2-S1-EVO Junos OS Evolved versions 23.4R1-EVO through 23.4R2-EVO Description: An issue in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access ...
Adobe Experience Manager Cross-Site Scripting Vulnerability
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The solution supports mobile content management, marketing and sales campaign management, and multi-site management. A...
UBUNTU-CVE-2022-48737
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
htop Security Vulnerabilities
htop is a cross-platform interactive process viewer from htop open source. A security vulnerability exists in htop version v.2.20, which stems from out-of-bounds access in the HeaderpopulateFromSettings function...
PT-2024-8812 · Intel · Intel Quartus Prime Pro Edition
Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro Edition software for Windows versions prior to 24.2 Description: The issue is related to an uncontrolled search path in the Intel Quartus Prime Pro software, which may allow an authenticated user to potentially enabl...