PT-2023-20055 · Aten · Aten Pe8108

Name of the Vulnerable Software and Affected Versions: Aten PE8108 version 2.4.232 Description: The issue concerns Incorrect Access Control, where the device allows unauthenticated access to Event Notification configuration. Recommendations: For Aten PE8108 version 2.4.232, consider restricting...

ATEN International PE8108 安全漏洞

The ATEN International PE8108 is an intelligent PDU from China-based ATEN International. A security vulnerability exists in ATEN International PE8108 version 2.4.232, which stems from incorrect access control...

CVE-2023-25041

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cththemes Monolit theme = 2.0.6 versions...

WordPress plugin Webinar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2023-23987

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPEverest User Registration plugin = 2.3.0 versions...

CVE-2022-4940

The WCFM Membership plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 2.10.0 due to missing capability checks on various AJAX actions. This makes it possible for unauthenticated attackers to perform a wide variety of actions such ...

PT-2023-16491 · Unknown · Orangescrum

Name of the Vulnerable Software and Affected Versions: OrangeScrum version 2.0.11 Description: The issue allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the application returns malicious user input in the response with the content-type...

Directus 资源管理错误漏洞

Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A security vulnerability exists in the Directus API version v.2.2.0. A remote attacker could exploit this vulnerability to cause a denial of service via a large number of HTTP requests to the system...

CVE-2022-47190

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...

SUSE CVE-2022-44368

NASM v2.16 was discovered to contain a null pointer deference in the NASM component...

ABB AC500 V2 代码问题漏洞

ABB ABB AC500 V2 is a PLC from ABB Switzerland. for simple control tasks and complex automation solutions. A security vulnerability exists in ABB AC500 V2 versions prior to 2.0.0 through 2.8.6 that stems from incorrect input validation...

Generex UPS CS141 代码问题漏洞

The Generex UPS CS141 is a microcomputer from the German company Generex. A security vulnerability exists in the Generex UPS CS141 prior to version 2.06, which stems from a vulnerability that allows an attacker to upload a firmware file containing a webshell...

SUSE CVE-2023-25809

runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes /sys/fs/cgroup writable in following conditons: 1. when runc is executed inside the user namespace, and the config.json does not specify the cgroup...

AZL-25935 CVE-2022-44369 affecting package nasm 2.16-1

NASM 2.16 development is vulnerable to 476: Null Pointer Dereference via output/outaout.c...

DEBIAN-CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

undertow: Server identity in https connection is not checked by the undertow client

A flaw was found in undertow. The undertow client is not checking the server identity the server certificate presents in HTTPS connections. This is a compulsory step that should at least be performed by default in HTTPS and in http/2...

CVE-2023-27167

Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?searchmonth=1...

NASM 代码问题漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in NASM v2.16, which stems from the presence of a null pointer dereference...

NASM 代码问题漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in NASM v2.16, which stems from a null pointer dereference issue in output/outaout.c. The vulnerability is caused by a null pointer dereference issue...

PT-2023-14456 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: NASM version 2.16 Description: A null pointer dereference was discovered in the NASM component. Recommendations: For NASM version 2.16, at the moment, there is no information about a newer version that contains a fix for this issue...