kernel: NFSD: Protect against send buffer overflow in NFSv3 READDIR

A buffer management flaw was found in the Linux kernel's NFS server implementation in the NFSv3 READDIR operation handling. A remote client can trigger this issue by crafting an RPC call with an oversized RPC record header, which forces the server to shrink its response buffer allocation. This...

CVE-2022-22508

Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 3.0, which stems from an out-of-memory issue...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 3.0, which stems from a containment assertion failure...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 3.0.0, which originates from the component scannerliteraliscreated in /jerry-core/parser/js/js-scanner-util.c contains a heap buffer overflow...

PT-2023-23511 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0.0 Description: A heap-buffer-overflow issue was discovered in Jerryscript via the component scanner literal is created at /jerry-core/parser/js/js-scanner-util.c. Recommendations: For Jerryscript version 3.0.0, conside...

kernel: Linux kernel lockd: Denial of Service via uninitialized file lock field in NFSv3

A flaw was found in the Linux kernel's lockd component, which handles file locking. A local user could exploit this vulnerability by interacting with re-exported NFSv3 Network File System version 3 shares. This could cause the kernel to crash, leading to a Denial of Service DoS for the system...

kernel: can: m_can: m_can_tx_handler(): fix use after free of skb

In the Linux kernel, the following vulnerability has been resolved: can: mcan: mcantxhandler: fix use after free of skb canputechoskb will clone skb then free the skb. Move the canputechoskb for the mcan version 3.0.x directly before the start of the xmit in hardware, similar to the 3.1.x branch...

imgproxy 代码问题漏洞

imgproxy is imgproxy individual developer's fast and secure standalone server for tweaking and converting remote images. A security vulnerability exists in imgproxy version 3.14.0 and earlier versions, which stems from a lack of cleanup of the imageURL parameter...

Adslr VEC40G 操作系统命令注入漏洞

The Adslr VEC40G is a high performance security gateway from Flying Fish Star Technology Adslr, Chengdu, China. An operating system command injection vulnerability exists in the Adslr VEC40G version 3.0, which stems from an incorrect operation of the parameter COUNT resulting in os command...

Rebuild 跨站请求伪造漏洞

Rebuild is a highly customizable enterprise management system. A cross-site request forgery vulnerability exists in Rebuild version 3.2. An attacker could exploit this vulnerability to perform a cross-site request forgery attack...

PT-2023-20958 · Kaios · Kaios

Name of the Vulnerable Software and Affected Versions: KaiOS version 3.0 Description: An issue was discovered in the pre-installed Communications application, which exposes a Web Activity that returns the user's call log without origin or permission checks. An attacker can inject a JavaScript...

MLECMS SQL注入漏洞

MLECMS is a multi-language, free, open source content management system from MLECMS Inc. A SQL injection vulnerability exists in MLECMS version 3.0, which stems from the fact that incorrect operation of the parameter $SERVERREQUESTURI can lead to sql injection...

PT-2023-11595 · Hongcms · Hongcms

Name of the Vulnerable Software and Affected Versions: HongCMS version 3.0 Description: The issue allows attackers to run arbitrary code via the callback parameter to the "/ajax/myshop" API endpoint. This enables attackers to execute malicious scripts, potentially leading to unauthorized access o...

PT-2023-18671 · Rapid7 · Rapid7 Insight Agent

Name of the Vulnerable Software and Affected Versions: Rapid7 Insight Agent versions 3.2.6 and below Description: The issue is related to a Directory Traversal vulnerability. Unsantized input from a CLI argument flows into io.ioutil.WriteFile, where it is used as a path, potentially allowing an...

CVE-2023-28090

An HPE OneView appliance dump may expose SNMPv3 read credentials...

PT-2023-21550 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns an HPE OneView appliance dump that may expose SNMPv3 read credentials. Recommendations: At the moment, there is no information about a newer version that contains a f...

Mobicint 授权问题漏洞

Mobicint is Mobicint's mobile and desktop service for financial institutions. A security vulnerability exists in Mobicint version v3, which stems from the ability to retrieve partial e-mail addresses and user-entered information via the forgotten-password API...

WordPress Plugin Pricing Tables For WPBakery Page Builder 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in...

TigerGraph 安全漏洞

TigerGraph is one of the world's fastest and most scalable graph analytics platforms from the TigerGraph community. Enabling real-time big data graph applications. A security vulnerability exists in TigerGraph Enterprise Free Edition 3.x series versions that stems from the fact that all...