4744 matches found
Khoj 安全漏洞
Khoj is an open source application from Khoj AI. It can be used to create ready-to-use personal AI agents for users. A security vulnerability exists in versions prior to Khoj 1.15.0 that stems from parameters not being properly cleaned, allowing users to insert arbitrary HTML into task...
CVE-2024-43330
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack for Beaver Builder allows Reflected XSS.This issue affects PowerPack for Beaver Builder: from n/a before 2.37.4...
Fortra GoAnywhere MFT 安全漏洞
Fortra GoAnywhere MFT is a secure file transfer solution from Fortra USA. A security vulnerability exists in Fortra GoAnywhere MFT versions prior to 7.6.0 that stems from an authentication bypass vulnerability that allows an administrator user with access to the agent console to bypass certain...
PT-2024-22627 · Intel · Intel Ipp
Name of the Vulnerable Software and Affected Versions: IntelR IPP software versions prior to 2021.11 Description: The issue is related to an uncontrolled search path in some IntelR IPP software, which may allow an authenticated user to potentially enable escalation of privilege via local access...
WordPress plugin Olive One Click Demo Import 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An information disclosure vulnerabilit...
WordPress Search Filter Pro plugin < 2.5.18 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Felipe Caon in WordPress Plugin Search Filter Pro versions 2.5.18...
CVE-2024-36130
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker within the network to execute arbitrary commands on the underlying operating system of the appliance...
Nagios 安全漏洞
Nagios is a suite of open source, free network monitoring tools from the US-based Nagios Corporation. A security vulnerability exists in Nagios NDOUtils prior to version 2.1.4, which stems from an executable file owned by a nagios user that can lead to elevated privileges up to root...
CVE-2024-6361
Improper Neutralization vulnerability XSS has been discovered in OpenText™ ALM Octane. The vulnerability affects all version prior to version 23.4. The vulnerability could cause remote code execution attack...
UBUNTU-CVE-2024-42458
server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...
Changing TCBServiSign 加密问题漏洞
Changing TCBServiSign is a cross-platform security control component from China-based Changing. An encryption issue vulnerability exists in versions prior to Changing TCBServiSign 1.0.24.0318, which stems from insufficient encryption strength of the authorization key, and can be exploited by a...
AJ-Report 安全漏洞
AJ-Report is an open source visual design tool from anji-plus. A security vulnerability exists in AJ-Report versions prior to 1.4.1, which originates from a remote, unauthenticated attacker who can attach swagger-ui to an HTTP request to bypass authentication and execute arbitrary Java on the...
PT-2024-11939 · Lenovo · Lenovo Driver Manager
Name of the Vulnerable Software and Affected Versions: Lenovo Driver Manager versions prior to 3.1.1307.1308 Description: A path hijacking issue allows a local user to execute code with elevated privileges. Recommendations: For versions prior to 3.1.1307.1308, update to version 3.1.1307.1308 or...
Cato Networks Windows SDP Client 安全漏洞
Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A security vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.34, which stems from code that can be remotely executed via a specially crafted URL...
WordPress Web Directory Free plugin < 1.7.2 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Simone Onofri, Kim Cerra, Andrea De Dominicis in WordPress Plugin Web Directory Free versions 1.7.2...
WordPress Paid Memberships Pro - Membership Maps Add On plugin < 0.7 - Contributor+ Sensitive Information Disclosure vulnerability
WordPress Paid Memberships Pro - Membership Maps Add On plugin 0.7 - Contributor+ Sensitive Information Disclosure vulnerability discovered by Scott Kingsley Clark in WordPress Plugin Pmpro Membership Maps versions 0.7...
WordPress plugin pmpro-member-directory 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability in...
PT-2024-37400
Name of the Vulnerable Software and Affected Versions: M-Files Hubshare versions prior to 5.0.6.0 Description: The issue allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. This is achieved through a reflected XSS attack. Recommendations: For...
Archer Platform 安全漏洞
Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 6 2024.06 that stems from susceptibility to a stored cross-site scripting attack in which an attacker stores malicious code in a trusted applicati...