PaddlePaddle 资源管理错误漏洞

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. A security vulnerability exists in PaddlePaddle versions prior to 2.5.0, which stems from a Use after free vulnerability. An attacker could use this vulnerability to perform unauthorized operations or...

CVE-2023-33925

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PluginForage WooCommerce Product Categories Selection Widget plugin = 2.0 versions...

Apache Felix Healthcheck Webconsole Plugin 跨站脚本漏洞

Apache Felix Healthcheck Webconsole Plugin is a web console plugin from the Apache Foundation USA. A cross-site scripting vulnerability exists in Apache Felix Healthcheck Webconsole Plugin 2.0.2 and earlier versions, which stems from the presence of a reflected cross-site scripting XSS...

PT-2023-25220 · Iq Wifi 6 · Iq Wifi 6

Name of the Vulnerable Software and Affected Versions: IQ Wifi 6 versions prior to 2.0.2 Description: An unauthorized user could gain account access by conducting a brute force authentication attack. Recommendations: For IQ Wifi 6 versions prior to 2.0.2, update to version 2.0.2 or later to resol...

Johnson Controls IQ Wifi 6 安全漏洞

Johnson Controls IQ Wifi 6 is a series of WiFi devices from Johnson Controls, Inc. A security vulnerability previously existed in Johnson Controls IQ Wifi 6 version 2.0.2, which stemmed from a brute force authentication attack that could be used by an unauthorized user to gain access to an accoun...

CVE-2023-32258

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation. A security vulnerability exists in the Linux kernel that stems from flaws in the handling of the SMB2TREECONNECT and SMB2QUERYINFO commands, which lack proper validation of pointers before they are...

SUSE CVE-2023-3347

A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, suc...

Chengdu Flash Flood Disaster Monitoring and Warning System 代码问题漏洞

Chengdu Flash Flood Disaster Monitoring and Warning System is a flash flood disaster monitoring and warning system in Chengdu. A code issue exists in version 2.0 of the Chengdu Flash Flood Disaster Monitoring and Warning System where an incorrect operation of the parameter userFile can lead to...

PT-2023-26247 · Unknown · Chengdu Flash Flood Disaster Monitoring/Warning System

Name of the Vulnerable Software and Affected Versions: Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0 Description: A vulnerability was found in the Chengdu Flash Flood Disaster Monitoring and Warning System. It affects some unknown functionality of the file...

PT-2023-26261 · Unknown · Chengdu Flash Flood Disaster Monitoring/Warning System

Name of the Vulnerable Software and Affected Versions: Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0 Description: A problematic vulnerability was found in the Chengdu Flash Flood Disaster Monitoring and Warning System. This issue affects the file /Service/FileHandler.ashx...

PT-2023-26256 · Unknown · Chengdu Flash Flood Disaster Monitoring/Warning System

Name of the Vulnerable Software and Affected Versions: Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0 Description: A problematic vulnerability has been found in the Chengdu Flash Flood Disaster Monitoring and Warning System. This issue affects an unknown part of the file...

CVE-2023-30200

In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” ultimateimagetool in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack...

PT-2023-23811 · Dell · Dell Hybrid Client

Name of the Vulnerable Software and Affected Versions: Dell Hybrid Client version 2.0 Description: The issue allows an unauthenticated malicious user on the device to access hard-coded secrets in javascript files, resulting in sensitive data exposure. Recommendations: For Dell Hybrid Client versi...

Cockpit CMS 跨站请求伪造漏洞

Cockpit is an interactive server management interface. A security vulnerability exists in Cockpit CMS version 2.5.2 that stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker can exploit this vulnerability to execute arbitrary administrator commands...

Atlas Business Directory Listing 跨站脚本漏洞

codecanyon Atlas Business Directory Listing is a system by codecanyon, Inc. A cross-site scripting vulnerability exists in Atlas Business Directory Listing version 2.13, which stems from a cross-site scripting XSS vulnerability in the parameter price-range...

CVE-2023-33329

Auth. admin+ Reflected Cross-Site Scripting XSS vulnerability in Hijiri Custom Post Type Generator plugin = 2.4.2 versions...

PT-2024-12778

Name of the Vulnerable Software and Affected Versions Linux Kernel ksmbd affected versions not specified Description A flaw was found in the handling of SMB2 READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverag...

PT-2023-25990

Name of the Vulnerable Software and Affected Versions Fides versions 2.11.0 through 2.15.1 Description Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fides webserver is vulnerable to a type of Denial of Service DoS attack...

Fides 资源管理错误漏洞

Fides is an open source privacy engineering platform for managing the implementation of data privacy requests in the runtime environment and the enforcement of privacy regulations in code. A resource management error vulnerability exists in Fides versions 2.11.0 through 2.15.1, which stems from...