WordPress plugin SKT Templates 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

RHSA-2014:0629 Red Hat Security Advisory: rhev-hypervisor6 security update

Bulletin has no description...

PT-2024-32775

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A vulnerability in the Linux kernel has been resolved, which could lead to memory leaks. The issue is related to the bpf helpers that had ARG PTR TO LONG,INT as input arguments. In case of an...

CVE-2024-45182

An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary address read, resulting in Denial of Service...

ipv6: prevent possible NULL deref in fib6_nh_init()

...

In the Elliptic package 6.5.6 for Node.js ECDSA signature malleability occurs because BER-encoded signatures are allowed.

...

PT-2024-7130 · Tp Link · Tp-Link Wr740N

Name of the Vulnerable Software and Affected Versions: TP-Link WR740N version V6 Description: The issue is related to a stack overflow vulnerability. It can be exploited via the ssid parameter in the "/userRpm/popupSiteSurveyRpm.htm" URL, potentially allowing an attacker to execute arbitrary code...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Axis Sweden AXIS. A security vulnerability exists in AXIS OS versions 6.50 through 11.11. An attacker exploited the vulnerability to cause the device to run out of resources...

Veeam Agent for Linux 安全漏洞

Veeam Agent for Linux is a data protection and disaster recovery solution for physical and virtual machines from Veeam USA. A security vulnerability exists in Veeam Agent for Linux version 6.2 and prior versions, which stems from a lack of authorization validation that allows a local,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse vulnerability in the ipv6 component...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse vulnerability in the ipv6 component...

za-internet C-MOR Video Surveillance 安全漏洞

za-internet C-MOR Video Surveillance is a network video surveillance system from the German company za-internet. A security vulnerability exists in za-internet C-MOR Video Surveillance version 5.2401 and 6.00PL01, which stems from a lack of protection mechanisms and is susceptible to cross-site...

LimeSurvey 安全漏洞

LimeSurvey PHPSurveyor is an open source online questionnaire program from the LimeSurvey team that supports survey program development, survey posting, and data collection. A security vulnerability exists in LimeSurvey version v6.5.12, which stems from the inclusion of a CSV injection...

ShopXO 安全漏洞

ShopXO is an open source, enterprise-grade, open source e-commerce system from ShopXO, Inc. A security vulnerability exists in ShopXO version 6.2, which can be exploited to execute code by changing the POST parameter...

PT-2024-28661 · Ibm · Ibm Sterling Connect:Direct Web Services

Name of the Vulnerable Software and Affected Versions: IBM Sterling Connect:Direct Web Services versions 6.0 through 6.3 Description: The issue concerns the use of default credentials for potentially critical functionality in IBM Sterling Connect:Direct Web Services. This could pose a significant...

The vulnerability of the DHCPv6 relay agent in the Cisco NX-OS operating system allows a attacker to trigger a service failure.

The vulnerability of the DHCPv6 relay agent in the Cisco NX-OSS operating system is related to the assignment of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service failure by sending specially crafted DHCP packets remotely...

SUSE CVE-2024-28863

node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder creation process. An attacker who generates a large number of sub-folders can consume memory on the system running node-tar and even crash the Node.js client within few...

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server version 5.0 up to and including version 5.0.14...

PT-2024-28349

Name of the Vulnerable Software and Affected Versions Gnuboard versions 6.0.4 and below Description An Open Redirect issue exists in Gnuboard. The issue is due to a flaw in the url parameter within the login path. This allows an attacker to redirect users to a malicious website. The vulnerable...

Gnuboard 安全漏洞

Gnuboard is an open source set of extensible forum programs from Gnuboard. A security vulnerability exists in Gnuboard v6.0.4 and earlier versions, which stems from the presence of an open redirection vulnerability via the url parameter in the login path...