8474 matches found
CVE-2023-24763
In the module "Xen Forum" xenforum for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0...
FabulaTech USB for Remote Desktop 安全漏洞
Fabulatech FabulaTech USB for Remote Desktop is a USB device remote connection application from Fabulatech UK that supports redirection of USB devices plugged into the local computer to a remote computer. A security vulnerability exists in FabulaTech USB for Remote Desktop version 2.8.42. An...
The vulnerability of the spectre_v2_select_mitigation() function in the Linux operating system allows a hacker to execute arbitrary code.
The vulnerability of the spectrev2selectmitigation function in the Linux operating system is related to errors in Intel processors when processing the RET instruction after the termination of a virtual machine. Exploiting this vulnerability allows an attacker to execute arbitrary code...
DEBIAN-CVE-2022-41723
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...
CVE-2023-23992
Cross-Site Request Forgery CSRF vulnerability in AutomatorWP plugin = 2.5.0 leads to object delete...
TCG TPM 缓冲区错误漏洞
TCG TPM is a chip from the Trusted Computing Group that is planted inside a computer to provide a trusted root for the computer. A buffer error vulnerability exists in version 2.0 of the TCG TPM that stems from an out-of-bounds read issue. An attacker could use this vulnerability to read or acces...
CVE-2023-24253
Domotica Labs srl Ikon Server before v2.8.6 was discovered to contain a SQL injection vulnerability...
MuYuCMS 代码问题漏洞
MuYuCMS is MuYuCMS open source a lightweight open source content management system . MuYuCMS 2.2 version of the code problematic vulnerability , the vulnerability stems from the wrong operation of the parameter url leads to server-side request forgery...
MuYuCMS 路径遍历漏洞
MuYuCMS is MuYuCMS open source a lightweight open source content management system . MuYuCMS 2.2 version of a security vulnerability , the vulnerability stems from the wrong operation of the parameter dirpath leads to relative path traversal...
PT-2023-16712 · Muyucms · Muyucms
Name of the Vulnerable Software and Affected Versions: MuYuCMS version 2.2 Description: A vulnerability was found in MuYuCMS. It has been classified as problematic. The issue affects an unknown function of the file /editor/index.php. The manipulation of the dir path argument leads to relative pat...
URule 代码问题漏洞
URule is a pure Java rules engine by Gao Jie youseries individual developers. URule v2.1.7 version has a security vulnerability, the vulnerability stems from the existence of XML external entity XXE vulnerability, an attacker can be exploited to exploit the vulnerability by the carefully crafted...
http2-server: Invalid HTTP/2 requests cause DoS
A flaw was found in the Eclipse Jetty http2-server package. This flaw allows an attacker to cause a denial of service in the server via HTTP/2 requests...
PT-2023-20614 · WordPress · Buddyforms
Name of the Vulnerable Software and Affected Versions: BuddyForms WordPress plugin versions prior to 2.7.8 Description: The issue is related to an unauthenticated insecure deserialization problem. An attacker could exploit this to call files using a PHAR wrapper, which deserializes data and calls...
CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
kernel: NFSD: Protect against send buffer overflow in NFSv2 READ
In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffers into a single array of pages. This...
PT-2023-2009 · Tp Link · Tp-Link Archer C50
Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 version V2 160801 Description: A vulnerability in the Web Management Interface component of the TP-Link Archer C50 can be exploited to cause a denial of service. The issue is related to incorrect clearance or release of...
MongoDB 代码问题漏洞
MongoDB is a document-oriented database management system from the American company MongoDB. A code issue vulnerability exists in MongoDB .NET/C Driver version v2.18.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...
PT-2023-10346 · Meta4Creations · Meta4Creations Post Duplicator Plugin
Name of the Vulnerable Software and Affected Versions: meta4creations Post Duplicator Plugin version 2.18 Description: A vulnerability was found in the meta4creations Post Duplicator Plugin. It has been classified as problematic and affects the function mtphr post duplicator notice of the file...