6115 matches found
CVE-2024-3652
The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected...
AZL-39927 CVE-2024-3652 affecting package libreswan for versions less than 4.14-2
The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected...
AZL-39919 CVE-2024-3652 affecting package libreswan for versions less than 4.15-1
The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected...
UBUNTU-CVE-2024-3652
The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. When the peer requests AES-GMAC, libreswan's default proposal handler causes an assertion failure and crashes and restarts. IKEv2 connections are not affected...
Warehouse Management System 跨站脚本漏洞
Warehouse Management System is a warehouse management system developed by Carlo Montero. A cross-site scripting vulnerability exists in Warehouse Management System version 1.0, which stems from the parameter adminuser/adminnama/adminalamat/admintelepon in the file pengguna.php, which can lead to...
CVE-2024-31298
Insertion of Sensitive Information into Log File vulnerability in Joel Hardi User Spam Remover.This issue affects User Spam Remover: from n/a through 1.0...
PT-2024-26922 · Sourcecodester · Kortex Lite Advocate Office Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /control/adds.php. The manipulation of the name, gender, dob,...
Student Management System 安全漏洞
Student Management System is a simple web-based student management software by the individual developer Sk. Amir Hamza of Bangladesh. A security vulnerability exists in Complete Online Student Management System version 1.0, which is caused by a cross-site scripting vulnerability in the FirstRecor...
PT-2024-4388 · Libreswan +6 · Libreswan +6
Name of the Vulnerable Software and Affected Versions: Libreswan versions prior to 4.15 Description: The issue is related to the Libreswan library, which is used for VPN protocols with "IPsec". It is caused by an assertion failure when handling IKEv1 packets without specifying an esp= line. When ...
PT-2024-26440 · Unknown · Campcodes Church Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file login.php. The manipulation of the password argument leads to sql injection. The attac...
PT-2024-26484 · Unknown · Campcodes Church Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A problematic vulnerability has been found in the system, affecting an unknown part of the file /admin/admin user.php. The manipulation of the firstname argument leads to cross-site...
PT-2024-26479 · Unknown · Campcodes Church Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /admin/add sundaysch.php. The manipulation of the Gender argument leads to sql...
Warehouse Management System 跨站脚本漏洞
Warehouse Management System is a Warehouse Management System developed by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Warehouse Management System version 1.0, which originates from an unknown function in barang.php that leads to cross-site...
Church Management System SQL注入漏洞
Church Management System is a church management system. A SQL injection vulnerability exists in version 1.0 of the Church Management System, which is caused by a SQL injection vulnerability in the password parameter of the login.php file...
PT-2024-26384
Name of the Vulnerable Software and Affected Versions Campcodes Online Event Management System version 1.0 Description A critical issue has been discovered, affecting the /api/process.php file. The manipulation of the userId argument leads to sql injection, allowing remote attacks. The issue has...
PT-2024-26427 · Unknown · Campcodes Complete Online Student Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Student Management System version 1.0 Description: A vulnerability was found in the processing of the file courses view.php, where the manipulation of the argument FirstRecord leads to cross-site scripting. The attac...
AZL-40192 CVE-2024-2511 affecting package edk2 for versions less than 20240524git3e722403cd16-8
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
PT-2024-25883 · Sourcecodester · Sourcecodester Prison Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Prison Management System. This issue affects the file /Employee/apply leave.php, where the manipulation of the txtsta...
PT-2024-25872 · Sourcecodester · Sourcecodester Prison Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue has been found in the SourceCodester Prison Management System, affecting the file /Employee/delete leave.php. This issue leads to sql injection and can be...
PuneethReddyHC Event Management SQL注入漏洞
PuneethReddyHC Event Management is an application by Puneeth Reddy H C Individual Developer. Helps users to register for events organized in university festivals with simple logic and security. A SQL injection vulnerability exists in PuneethReddyHC Event Management version 1.0, which originates...