3601 matches found
Zulip 安全漏洞
Zulip is a powerful open source group chat application from Zulip, Inc. for combining the immediacy of real-time chat with the productivity benefits of threaded conversations. A security vulnerability exists in versions prior to Zulip 6.2, which stems from the fact that if organizational privileg...
Brother iPrint&Scan 安全漏洞
Brother iPrint&Scan is a free application from Brother that allows you to print and scan from your Android device. A security vulnerability exists in Brother iPrint&Scan V6.11.2 and earlier versions, which stems from an access control vulnerability that contains incorrect access control, and whic...
DEBIAN-CVE-2023-2745
WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wplang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such ...
PT-2023-21137 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: WordPress Core versions up to, and including, 6.2 Description: The issue allows unauthenticated attackers to access and load arbitrary translation files via the wp lang parameter, potentially leading to a Cross-Site Scripting attack if a...
kernel: data races around sk->sk_prot
A data race problem was found in sk-skprot in the network subsystem in ipv6 in the Linux kernel. This issue occurs while some functions access critical data, leading to a denial of service...
kernel: memory leak in ipv6_renew_options()
A memory leak flaw was found in the Linux kernel’s IPv6 functionality in how a user triggers the setsockopt of the IPV6ADDRFORM and IPV6DSTOPTS type. This flaw allows a user to crash the system if the setsockopt function is being called simultaneously with the IPV6ADDRFORM type and other processe...
CVE-2022-47129
PHPOK v6.3 was discovered to contain a remote code execution RCE vulnerability...
PT-2023-15175 · Phpok · Phpok
Name of the Vulnerable Software and Affected Versions: PHPOK version 6.3 Description: The issue is a remote code execution RCE vulnerability. Recommendations: For PHPOK version 6.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2023-28128
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve a remove code execution...
kernel: data races around sk->sk_prot
A data race problem was found in sk-skprot in the network subsystem in ipv6 in the Linux kernel. This issue occurs while some functions access critical data, leading to a denial of service...
Ivanti Avalanche 代码问题漏洞
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A code issue vulnerability exists in Ivanti Avalanche version 6.3.x and prior versions, which stems from a failure ...
CVE-2023-24408
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin = 6.11.4 versions...
Netcon NS-ASG SQL注入漏洞
Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A security vulnerability exists in Netcon NS-ASG v6.3, which originates from an SQL injection vulnerability in the component /admin/addikev2.php...
CVE-2023-30268
CLTPHP =6.0 is vulnerable to Improper Input Validation...
PT-2023-2733
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which...
PT-2023-22618 · Cltphp · Cltphp
Name of the Vulnerable Software and Affected Versions: CLTPHP versions prior to 6.1 Description: The issue is related to improper input validation. Recommendations: For versions prior to 6.1, update to version 6.1 or later to resolve the issue...
PT-2023-16812 · WordPress · Advanced Custom Fields Pro
Name of the Vulnerable Software and Affected Versions: Advanced Custom Fields ACF Free and Pro WordPress plugins versions 5.x through 5.12.4 Advanced Custom Fields ACF Free and Pro WordPress plugins versions 6.x through 6.0.x Description: The issue allows users with a role of Contributor and abov...
CLTPHP 代码问题漏洞
CLTPHP is an open source PHP content management system for efficient website building. A security vulnerability exists in CLTPHP version 6.0 and earlier versions, which stems from the presence of a file upload vulnerability...
CLTPHP 路径遍历漏洞
CLTPHP is an open source PHP content management system for efficient website building. A security vulnerability exists in CLTPHP version 6.0 and earlier versions. An attacker exploited the vulnerability to read arbitrary files on the server running the application...