PT-2024-26290 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/banner deal.php component. The mudi, dataType, dataTypeCN, theme, and dataID parameters are involved. This allows for unauthorized action...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Brokerage System is a cloud management brokerage system from China's Net Titanium Technology, Inc. A security vulnerability exists in version 1.35 of idccms, which contains a cross-site request forgery CSRF vulnerability...

PT-2024-26291 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component "/admin/infoType deal.php" with parameters mudi and nohrefStr. This allows for unauthorized requests. Recommendations: For idccms version...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Brokerage System is a cloud management brokerage system from China's Net Titanium Technology, Inc. A security vulnerability exists in version 1.35 of idccms, which contains a cross-site request forgery CSRF vulnerability...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idccms v1.35, which originates from admin/readDeal.php containing a cross-site request...

Net Titanium Technology idcCMS 跨站请求伪造漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Proxy System is a cloud management proxy system from China's Net Titanium Technology Net Titanium Technology. A cross-site request forgery vulnerability exists in version 1.35 of idcCMS, which originates from the file...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow due to incorrectly handled extension attributes in PAX archives. An attacker can cause the application to crash by manipulating the PAX archive attributes. Remediation Upgrade tar to version 1.35 or higher...

PT-2023-27111 · Gnu +5 · Gnu Tar +5

Name of the Vulnerable Software and Affected Versions: GNU tar versions prior to 1.35 Description: The issue arises from mishandled extension attributes in a PAX archive, which can cause an application crash in xheader.c. Recommendations: For GNU tar versions prior to 1.35, update to version 1.35...

PT-2023-8948 · Mediawiki +2 · Wikibase +2

Name of the Vulnerable Software and Affected Versions: Wikibase extension for MediaWiki versions 1.35.x through 1.35.11 Wikibase extension for MediaWiki versions 1.36.x through 1.39.4 Wikibase extension for MediaWiki versions 1.40.x through 1.40.0 Description: An issue was discovered in the...

OESA-2023-1583 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: There is ...

BusyBox 资源管理错误漏洞

BusyBox is a suite of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian individual developer. A security vulnerability exists in BusyBox version 1.35.x, which stems from a post-release reuse vulnerability in the copyvar function in the system awk gadget. An...

PT-2022-12581 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.5 MediaWiki versions 1.36.x prior to 1.36.3 MediaWiki versions 1.37.x prior to 1.37.1 Description: An issue was discovered in MediaWiki that allows CSRF through MassEditRegex. Recommendations: For MediaWiki...

MediaWiki suffers from an unspecified vulnerability (CNVD-2021-29994)

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.31.12 and versions prior to 1.32.x series 1.35.x...

CVE-2021-30157

An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special pages such as Special:RecentChanges and Special:Watchlist, some of the rcfilters-filter- label messages are output in HTML unescaped, leading to XSS...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read. A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this...

MediaWiki 信息泄露漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. An information disclosure vulnerability exists in the Push extension for MediaWiki 1.35 and prior versions...

MediaWiki cross-site scripting vulnerability (CNVD-2021-38682)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A cross-site scripting vulnerability exists in MediaWiki version 1.35, which...

MediaWiki RandomGameUnit Cross-Site Scripting Vulnerability

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A cross-site scripting vulnerability exists in MediaWiki RandomGameUnit versi...

PT-2020-17080 · Wikimedia +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.35 Description: The issue allows for XSS via a qbfind message supplied by an administrator in the CologneBlue skin. This can be exploited when an administrator supplies a malicious qbfind message. Recommendations:...

PT-2020-16880 · Mediawiki +2 · Randomgameunit +2

Name of the Vulnerable Software and Affected Versions: MediaWiki extension RandomGameUnit versions through 1.35 Description: The issue concerns the RandomGameUnit extension for MediaWiki, where certain title-related data was not properly escaped. This allowed for the manipulation of game names or...