Nadatel DVR Authorization Issues Vulnerability

Nadatel DVR is a series of hard disk recorders from the US company Nadatel. A security vulnerability exists in Nadatel DVR versions 3.0.0 through 9.9.0, which stems from an attacker being able to gain access to information through improper authentication...

PT-2023-28827 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R versions V9.4.0cu.652 B20230116 through V9.4.0cu.852 B20230719 Description: The issue allows a remote attacker to execute arbitrary code via the command parameter of the "setting/setTracerouteCfg" component. Recommendations: F...

dalineunit (>=0.0.31 <=0.0.69), encapsia-cli (>=0.1.8 <=0.5.1) +7 more potentially affected by CVE-2023-48052 via httpie (>=1.0.3 <=3.2.2)

httpie PYPI version =1.0.3, =0.0.31, =0.1.8, =0.0.14, =1.0.0, =2.0.0, =1.3.21, =1.9.24 - veracode-api-signing =21.3.0 Source cves: CVE-2023-48052 Source advisory: OSV:GHSA-8R96-8889-QG2X...

Bastion Access Control Error Vulnerability

Bastion is a group of machines used as a single entry point for operational teams to securely connect to devices. An Access Control Error vulnerability exists in Bastion versions 3.0.0 through 3.14.0, which originates in MFA where a group or individual can force an SCP/SFTP connection through...

abi-ds-utils (=1.0.1), acceldata-o2a (=1.0.0) +234 more potentially affected by CVE-2023-46215 via apache-airflow (>=1.10.1 <=2.6.3)

apache-airflow PYPI version =1.10.1, =0.8.44.4, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =0.1.0, =0.2.9b1, =1.0.7, =0.4.0, =0.1.0a1, =0.5.1, =0.1.1, =0.1.1, =1.10.6 and more Source cves: CVE-2023-46215 Source advisory: OSV:GHSA-666G-RFC5-C9JV...

@agentlab/ldkg-ui-basetable (=0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2 <=0.1.7) +329 more potentially affected by CVE-2023-45819 via tinymce (>=4.5.1 <=5.10.7)

tinymce NPM version =4.5.1, =0.1.2, =0.3.7, =0.1.17, =1.0.0, =1.0.0, =1.33.0, =1.0.0-alpha.39-baliz, =4.3.0, =0.5.0, =0.1.0, =0.0.4, =0.1.2, =0.8.4, =0.8.5 and more Source cves: CVE-2023-45819 Source advisory: OSV:GHSA-HGQX-R2HP-JR38...

2vyper (=0.3.0), ape-vyper (>=0.7.1 <=0.8.3) +23 more potentially affected by CVE-2023-41052 via vyper (>=0.1.0b12 <=0.3.10)

vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =0.2.1, =0.1.3, =0.1.10 and more Source cves: CVE-2023-41052 Source advisory: OSV:PYSEC-2023-168...

PT-2023-14370 · Ibm · Ibm Storage Scale Container Native Storage Access

Name of the Vulnerable Software and Affected Versions: IBM Storage Scale Container Native Storage Access versions 5.1.2.1 through 5.1.6.1 Description: The issue allows a local user to obtain escalated privileges on a host without proper security context settings configured. Recommendations: For...

CVE-2022-43713

Interactive Forms IAF in GX Software XperienCentral versions 10.33.1 until 10.35.0 was vulnerable to invalid data input because form validation could be bypassed...

Juniper Networks Junos OS MX 安全漏洞

Juniper Networks Junos OS MX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS MX has a security vulnerability that originates from improper input validation ...

com.webank.defibus:defibus-namesrv (>=1.0.0 <=1.0.1), io.github.harvies.charon:charon-rockermq-namesrv (=0.0.6) +9 more potentially affected by CVE-2023-33246 via org.apache.rocketmq:rocketmq-namesrv (>=4.1.0-incubating <=4.9.5)

org.apache.rocketmq:rocketmq-namesrv MAVEN version =4.1.0-incubating, =1.0.0, =0.0.7, =1.2.0-release, =1.10.0-release, =1.9.0-release, =1.2.0-release, =1.9.0-release, =2.1.0, =4.1.0-incubating, =4.9.5 Source cves: CVE-2023-33246 Source advisory: OSV:GHSA-X3CQ-8F32-5F63...

Microsoft NuGet Client 安全漏洞

NuGet Client is the NuGet client tool. Includes Visual Studio extensions, command line tools, and msbuild support. A security vulnerability exists in Microsoft NuGet Client. The following products and versions are affected: NuGet 6.2.3,NuGet 6.4.1,NuGet 6.5.0,NuGet 6.3.2,NuGet 6.0.4,NuGet 6.6.0...

UBUNTU-CVE-2023-0485

An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible that a project member demoted to a user role to read project updates by doing a diff wit...

ModSecurity 资源管理错误漏洞

ModSecurity is an intrusion detection and blocking engine that can be run as a module of the Apache Web Server or as a standalone application to enhance Web application security and protect Web applications from known and unknown attacks. A security vulnerability exists in Trustwave ModSecurity...

0.extends.wechat (>=1.0.51 <=1.0.65), 00ld8nuivn (=2.1.0) +30654 more potentially affected by CVE-2023-0842 via xml2js (>=0.1.10 <=0.4.9)

xml2js NPM version =0.1.10, =1.0.51, =1.0.65 - 00ld8nuivn =2.1.0 - 00rqiw31nd =2.1.0 - 01dk01majk =2.1.0 - 02rjq8i863 =1.1.0 - 02vx8qsp01 =2.1.0 - 05y6tjgmws =1.1.0 - 066m7q8o0z =2.1.0 - 06buj9h3su =2.1.0 - 06dre15t8r =2.1.0 - 07fgapmu9l =1.1.0 - 07t2xvu6t4 =2.1.0 - 0850u4lkpu =1.1.0 - 098of6vzvl...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab versions 1.6.50 up to and including...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +42481 more potentially affected by CVE-2023-26464 via log4j:log4j (>=1.1.3 <=1.2.9)

log4j:log4j MAVEN version =1.1.3, =1.1, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.9.0 - acegisecurity:acegi-security-resin =0.9.0 - acegisecurity:acegi-security-sample-annotations =0.9.0 - acegisecurity:acegi-security-tiger =0.9.0 - activeio:activeio =2.1 - activemq:activemq =1.1 -...

SUSE CVE-2017-11406

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values...

a62-emotion (>=0.10.12 <=0.11.4), agent-atm (>=0.1.0 <=0.1.1) +103 more potentially affected by CVE-2022-41893 via tensorflow-cpu (>=1.15.0 <=2.7.4)

tensorflow-cpu PYPI version =1.15.0, =0.10.12, =0.1.0, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.1.0.dev1, =0.1.0.dev202107081840 and more Source cves: CVE-2022-41893 Source advisory: OSV:GHSA-67PF-62XR-Q35M...

PT-2022-26267 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.1.3 through 7.4.3.4 Liferay DXP 7.1 before fix pack 27 Liferay DXP 7.2 before fix pack 17 Liferay DXP 7.3 before service pack 3 Liferay DXP 7.4 GA Description: A SQL injection issue in the Layout module allows remote...