BELL-CVE-2024-26853

Bulletin has no description...

PT-2024-22924 · WordPress · The Carousel

Name of the Vulnerable Software and Affected Versions: The Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce plugin for WordPress versions up to, and including, 2.6.3 Description: The issue is...

BELL-CVE-2024-28835

Bulletin has no description...

TP-LINK Omada ER605 Buffer Overflow Vulnerability

The TP-LINK Omada ER605 is a VPN router from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-LINK Omada ER605 versions 1.0.1 through 2.2.3, which originates from a boundary error when the application processes untrusted input. A remote attacker could exploit the vulnerability ...

Binary Vulnerability in Longchamp Browser

Dragoncore Browser is a browser. A binary vulnerability exists in Longchamp Browser, which can be exploited by attackers to cause a denial of service...

The vulnerability of the IBM Engineering Requirements Management DOORS application development tool, related to weak password requirements, allows attackers to compromise user accounts.

The vulnerability of the IBM Engineering Requirements Management DOORS application lies in its weak password requirements. Exploiting this vulnerability could allow attackers to compromise user accounts...

PT-2024-21994 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A vulnerability alert has been issued, but details about the issue are not provided. The estimated number of potentially affected devices and...

BELL-CVE-2023-52488

Bulletin has no description...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +22636 more potentially affected by CVE-2024-22243 via org.springframework:spring-web (>=1.2.1 <=5.2.25.RELEASE)

org.springframework:spring-web MAVEN version =1.2.1, =1.1, =0.0.1, =4.4.0.0, =0.1.6, =0.1.8, =0.1.6, =0.1.2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.21 and more Source cves: CVE-2024-22243 Source advisory: OSV:GHSA-CCGV-VJ62-XF9H...

BELL-CVE-2024-26589

Bulletin has no description...

PT-2024-15765 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A vulnerability alert has been reported, but the reason for rejection is due to very low impact, making it impractical to correct. No further details are provided about the issue,...

CVE-2022-46839 WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1...

Amazon Linux 2 : apache-ivy (ALAS-2023-2302)

The version of apache-ivy installed on the remote host is prior to 2.3.0-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2302 advisory. Improper Restriction of XML External Entity Reference, XML Injection aka Blind XPath Injection vulnerability in Apache Software...

CVE-2023-5030

A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLANID leads to sql injection. The exploit has been disclosed to the public and may be used...

org.apache.nifi:nifi-jms-processors-nar (>=0.6.0 <=1.22.0) potentially affected by CVE-2023-36542 via org.apache.nifi:nifi-jms-processors (>=0.6.0 <=1.22.0)

org.apache.nifi:nifi-jms-processors MAVEN version =0.6.0, =0.6.0, =1.22.0 Source cves: CVE-2023-36542 Source advisory: OSV:GHSA-R969-8V3H-23V9...

cc.chensoul.nacos:nacos-distribution (=2.5.2), com.buession.security:buession-security-spring (>=3.0.0 <=3.0.1) +262 more potentially affected by CVE-2023-34035 via org.springframework.security:spring-security-config (>=5.8.0 <=5.8.4)

org.springframework.security:spring-security-config MAVEN version =5.8.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.12.0, =5.12.0, =1.48.0, =1.48.0, =1.48.0, =4.5.0, =4.5.0, =4.5.0, =6.5.0, =4.5.0, =4.5.1 and more Source cves: CVE-2023-34035 Source advisory: OSV:GHSA-4VPR-XFRP-CJ64...

IBM QRadar SIEM 输入验证错误漏洞

IBM QRadar SIEM is a solution from International Business Machines IBM that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...

PT-2023-24892 · Pybb · Pybb

Name of the Vulnerable Software and Affected Versions: PyBB versions 0.1.0 Description: A manual code review of the PyBB bulletin board server revealed a vulnerability that allows users to submit any type of HTML tag, which can be executed. For example, a malicious tag, such as xss, can be used t...

7ghost (>=4.11.0 <=4.11.46), 7ghost-cli (>=1.17.6-next.0 <=1.18.4) +283 more potentially affected by CVE-2023-26136 via tough-cookie (>=4.0.0 <=4.1.2)

tough-cookie NPM version =4.0.0, =4.11.0, =1.17.6-next.0, =2.0.0, =3.11.1, =1.1.3, =1.0.51, =1.0.1, =1.0.4, =1.2.95, =1.0.0, =1.0.1, =1.0.57, =1.0.3, =1.0.469 and more Source cves: CVE-2023-26136 Source advisory: SNYK:JS-TOUGHCOOKIE-5672873...

svcgroup.cz Cross Site Scripting vulnerability OBB-3404784

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...