4743 matches found
CVE-2023-37759
Incorrect access control in the User Registration page of Crypto Currency Tracker CCT before v9.5 allows unauthenticated attackers to register as an Admin account via a crafted POST request...
PT-2023-27903 · Unknown · Matrix Media Repo
Name of the Vulnerable Software and Affected Versions: matrix-media-repo versions prior to 1.3.0 Description: The issue allows an attacker to upload malicious media to the media repository, which is then served with Content-Disposition: inline upon download. This can be leveraged to execute scrip...
Contec SolarView Compact Path Traversal Vulnerability
Contec SolarView Compact is an application system from Contec Japan. It provides photovoltaic power measurement systems. A security vulnerability exists in SolarView Compact versions prior to 6.00 that stems from the presence of a directory traversal vulnerability...
JSCAPE MFT Server Code Issue Vulnerability
JSCAPE MFT Server is a flexible and scalable hosted file transfer solution from JSCAPE USA. A security vulnerability exists in JSCAPE MFT Server versions prior to 2023.1.9 that stems from the presence of insecure deserialization, which allows an attacker to run arbitrary Java code through its...
PT-2023-4991 · Cacti +1 · Cacti +1
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.25 Description: An authenticated SQL injection issue was discovered in Cacti, an open source operational monitoring and fault management framework. This issue allows authenticated users to perform privilege...
PT-2023-5423 · Cacti · Cacti
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.25 Description: Cacti is an open source operational monitoring and fault management framework. A low-privileged OS user with access to a Windows host where Cacti is installed can create arbitrary PHP files in a web...
PT-2023-24472
Name of the Vulnerable Software and Affected Versions Bookreen versions prior to 3.0.0 Description The issue affects Unisign Bookreen, allowing OS Command Injection due to an Unrestricted Upload of File with Dangerous Type vulnerability. Recommendations For versions prior to 3.0.0, update to...
UBUNTU-CVE-2023-4758
Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV...
PT-2023-27961 · WordPress · Store Locator
Name of the Vulnerable Software and Affected Versions: Store Locator WordPress plugin versions prior to 1.4.13 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the plugin does not properly sanitise and escape an invalid nonce before outputting it ba...
SHIRASAGI Cross-Site Scripting Vulnerability
SHIRASAGI is a content management system CMS for the Japanese Shirasagi project. A security vulnerability exists in SHIRASAGI versions prior to v1.18.0. An attacker can exploit the vulnerability to execute arbitrary script on a web browser...
UBUNTU-CVE-2023-4678
Divide By Zero in GitHub repository gpac/gpac prior to 2.3-DEV...
UBUNTU-CVE-2023-4683
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2023-41738
Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in Directory Domain Functionality in Synology Router Manager SRM before 1.3.1-9346-6 allows remote authenticated users to execute arbitrary commands via unspecified vectors...
Synology Router Manager 信息泄露漏洞
Synology Router Manager SRM is a software used to configure and manage Synology routers from Synology Inc. in China. An information disclosure vulnerability exists in Synology Router Manager versions prior to 1.3 1.3.1-9346-6, which originates from the exposure of sensitive information in the cgi...
PT-2023-5315 · Acronis · Acronis Cloud Manager
Name of the Vulnerable Software and Affected Versions: Acronis Cloud Manager Windows versions before 6.2.23089.203 Description: The issue is related to sensitive information disclosure due to unauthenticated path traversal and improper input validation. This allows a remote attacker to access...
CVE-2023-31714
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities...
DEBIAN-CVE-2023-4572
Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
GHSA-RVM8-J2CP-J592 pf4j vulnerable to remote code execution via loadpluginPath parameter
An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter...
Gravitl Netmaker 安全漏洞
Gravitl Netmaker is a platform for creating and managing fast, secure and dynamic virtual overlay networks using WireGuard from Gravitl USA. For creating and controlling automated virtual networks. A security vulnerability exists in Gravitl Netmaker versions prior to 0.18.6, which stems from a bu...