The vulnerability of the “f_ipv6_enable” parameter in the /bsc_ipv6 microprogramming system of the D-Link DAP-2660 wireless access point allows a intruder to gain unauthorized access to protected information or cause service failure.

The vulnerability of the “fipv6enable” parameter in the /bscipv6 microprogramming software for the D-Link DAP-2660 wireless access point is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

MongoDB Server 信任管理问题漏洞

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A security vulnerability exists in MongoDB Server version v6.3, MongoDB Serve...

ncurses 缓冲区错误漏洞

ncurses is a character terminal processing library that provides a set of functions that can be called by the user to generate a text-based user interface. A security vulnerability exists in ncurses version 6.1 due to a buffer overflow in the fmtentry method of progs/dumpentry.c. The vulnerabilit...

PT-2023-19045 · Geomatika · Geomatika Isigeo Web

Name of the Vulnerable Software and Affected Versions: Geomatika IsiGeo Web version 6.0 Description: The issue allows remote authenticated users to retrieve PHP files from the server via Local File Inclusion. Recommendations: For Geomatika IsiGeo Web version 6.0, consider restricting access to...

CVE-2023-40253

Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Authentication Abuse.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 Revision 117460;...

CVE-2023-32562

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve a remove code execution. Fixed in version 6.4.1...

CVE-2023-32566

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1...

SUSE CVE-2023-39978

ImageMagick before 6.9.12-91 allows attackers to cause a denial of service memory consumption in Magick::Draw...

ImageMagick Security Vulnerability

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert, or write images in a variety of formats. A security vulnerability exists in versions prior to ImageMagick 6.9.12-91, which stems from a vulnerability that allows an...

ESDS Emagic Data Center Management Suit Operating System Command Injection Vulnerability

ESDS Emagic Data Center Management Suit is an all-in-one virtual data center suite from ESDS, Inc. An operating system command injection vulnerability exists in ESDS Emagic Data Center Management Suit v6.0 and prior versions, which stems from a lack of input cleanup in the Ping component, and can...

OPENSUSE-SU-2023:0208-1 Security update for trytond

This update for trytond fixes the following issues: - Version 6.0.34 - Security Bugfix Release see https://discuss.tryton.org/t/security-release-for-issue-12428/6397 - Version 6.0.33 - Bugfix Release...

PT-2023-26706 · Unknown · Creativeitem Academy Lms

Name of the Vulnerable Software and Affected Versions: Creative Item Academy LMS version 6.0 Description: A cross-site scripting XSS issue was discovered. This type of issue allows attackers to inject malicious scripts into content from otherwise trusted websites. Recommendations: For Creative It...

Creativeitem Academy-LMS Cross-Site Scripting Vulnerability

Creativeitem Academy-LMS is an online learning platform from Creativeitem, Inc. A cross-site scripting vulnerability exists in Creativeitem Academy-LMS version 6.0. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

FreeBSD Input Validation Error Vulnerability

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. FreeBSD suffers from a security vulnerability that stems from IPv6 packets triggering an integer overflow in the calculated payload length field, causing a kernel crash that can lead to a denial of service...

42Gears SureMDM 安全漏洞

42gears Mobility Systems 42Gears SureMDM is an asset management platform for mobile devices from 42gears Mobility Systems, USA. The platform is primarily used to monitor and manage enterprise mobile devices. A security vulnerability exists in 42gears Mobility Systems 42Gears SureMDM version 6.31...

CVE-2023-38056

Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any authenticated attacker with admin privileges local execution of Code.This issue affects OTRS: from 7.0.X before 7.0.45, from 8.0.X before 8.0.35...

PT-2023-26398 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2.10 Description: A problematic issue has been found in DedeBIZ, affecting some unknown functionality of the file /admin/sys sql query.php. The manipulation of the sqlquery argument leads to sql injection. The attack can be...

CVE-2023-37164

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...

Spring Security 安全漏洞

VMware Spring Security is a security framework from VMware that provides illustrative security protection for Spring-based applications. A security vulnerability exists in Spring Security that stems from an authorization rule misconfiguration when using multiple servlets. Affected Products and...

PT-2023-25734 · Unknown · Bylancer Quickjob

Name of the Vulnerable Software and Affected Versions: Bylancer QuickJob version 6.1 Description: A critical vulnerability has been found in the component GET Parameter Handler. The manipulation of the keywords/gender argument leads to sql injection. It is possible to launch the attack remotely...