5525 matches found
PT-2023-17446 · Campcodes · Campcodes Advanced Online Voting System
Name of the Vulnerable Software and Affected Versions: Campcodes Advanced Online Voting System version 1.0 Description: A critical issue affects the processing of the file /admin/positions add.php, where the manipulation of the description argument leads to sql injection. The attack can be...
PT-2023-21282 · Unknown · Trusted Tools Free Music
Name of the Vulnerable Software and Affected Versions: Trusted Tools Free Music versions 1.8.2.43 through 2.1.0.47 Description: A SQL injection issue allows a remote attacker to cause a denial of service via the search history table. This issue can be exploited to disrupt service. Recommendations...
CVE-2023-30636
TiKV 6.1.2 allows remote attackers to cause a denial of service fatal error, with RpcStatus UNAVAILABLE for "not leader" upon an attempt to start a node in a situation where the context deadline is exceeded...
CVE-2023-30636
TiKV 6.1.2 allows remote attackers to cause a denial of service fatal error, with RpcStatus UNAVAILABLE for "not leader" upon an attempt to start a node in a situation where the context deadline is exceeded...
PT-2023-2609 · NetGear · Netgear Srx5308
Name of the Vulnerable Software and Affected Versions: Netgear SRX5308 versions up to 4.3.5-3 Description: A vulnerability exists in the Web Management Interface of the Netgear SRX5308, allowing for cross-site scripting attacks. This issue is caused by the lack of protection for the web page...
PT-2023-22829 · Tikv · Tikv
Name of the Vulnerable Software and Affected Versions: TiKV version 6.1.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a fatal error. This occurs when attempting to start a node in a situation where the context deadline is exceeded, leading to an...
CVE-2023-30636
TiKV 6.1.2 allows remote attackers to cause a denial of service fatal error, with RpcStatus UNAVAILABLE for "not leader" upon an attempt to start a node in a situation where the context deadline is exceeded...
The vulnerability of the Undertow web server, related to executing a loop with an unavailable exit condition, allows attackers to cause a service failure.
The vulnerability of the Undertow web server relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Directory traversal
In SAP NetWeaver BI CONT ADDON - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a report to upload and overwrite files on the SAP server. Data cannot be read but if a remote attacker has sufficient administrative privileges then potentially critical OS files ca...
PT-2023-15343 · Unknown · Vdsp Service
Name of the Vulnerable Software and Affected Versions: vdsp service affected versions not specified Description: The issue is related to a missing permission check in the vdsp service, which could lead to a local denial of service in the vdsp service. Recommendations: At the moment, there is no...
PT-2023-20991 · Unknown · Gdidees Cms
Name of the Vulnerable Software and Affected Versions: GDidees CMS versions 3.9.1 and lower Description: The issue is related to an arbitrary file download via the filename parameter at the "/ admin/imgdownload.php" API endpoint. This allows unauthorized access to files on the system...
PT-2023-21172 · Sap · Sap Diagnostic Agent
Name of the Vulnerable Software and Affected Versions: SAP Diagnostics Agent version 720 Description: The EventLogServiceCollector of SAP Diagnostics Agent is affected by missing authentication and input sanitization of code, allowing an attacker to execute malicious scripts on all connected...
PT-2023-6320 · Adobe · Substance3D - Stager
Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.0.1 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...
PT-2023-2328 · Sap · Sap Diagnostic Agent
Name of the Vulnerable Software and Affected Versions: SAP Diagnostics Agent version 720 Description: The issue is related to missing authentication and insufficient input validation in the OSCommand Bridge of the SAP Diagnostics Agent. This allows an attacker with deep knowledge of the system to...
SiLabs Z-Wave over IP Gateway 缓冲区错误漏洞
The SiLabs Z-Wave over IP Gateway is a hardware unit that plugs into a Wi-Fi router and is used to add and configure Z-Wave devices as well as create and run "scenarios". A security vulnerability exists in SiLabs Z-Wave over IP Gateway. No information about this vulnerability is available at this...
编号已被CVE保留
No details are available at this time...
PT-2023-35752 · Git +1 · Simdutf
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write error. It occurs in the simdutf::haswell::implementation::convert utf8 to utf32 function, as indicat...
phpMyFAQ 跨站脚本漏洞
phpMyFAQ is a multi-language, fully database-driven FAQ system by Thorsten Rinne, a personal developer. A cross-site scripting vulnerability exists in phpMyFAQ. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...
PT-2023-16441 · Ulearn · Ulearn
Name of the Vulnerable Software and Affected Versions: Ulearn version a5a7ca20de859051ea0470542844980a66dfc05d Description: The issue allows an attacker with administrator permissions to obtain remote code execution on the server through the image upload functionality. This occurs because the...
