335 matches found
The vulnerability of the File Abstraction Layer (FAL) of the TYPO3 content management system allows a hacker to upload arbitrary files.
The vulnerability of the File Abstraction Layer FAL used for processing media files in the TYPO3 content management system is related to the ability to download unlimited number of dangerous types of files. Exploiting this vulnerability allows a remote attacker to download arbitrary files...
CVE-2023-28569
Information disclosure in WLAN HAL while handling command through WMI interfaces...
CVE-2023-28566
Information disclosure in WLAN HAL while handling the WMI state info command...
CVE-2023-28567
Memory corruption in WLAN HAL while handling command through WMI interfaces...
CVE-2023-28565
Memory corruption in WLAN HAL while handling command streams through WMI interfaces...
CVE-2023-28564
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces...
CVE-2023-28549
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload...
CVE-2023-28573
Memory corruption in WLAN HAL while parsing WMI command parameters...
Unauthorized Data Exposure
typo3/cms-core is vulnerable to unauthorized data exposure. The vulnerability is due to incomplete access control enforcement where frontend user group restrictions are applied only to the first table in multi-table queries using the database abstraction layer DBAL, allowing attackers to access...
Model Checking the Security of the Lightning Network
Payment channel networks are an approach to improve the scalability of blockchain-based cryptocurrencies. The Lightning Network is a payment channel network built for Bitcoin that is already used in practice. Because the Lightning Network is used for transfer of financial value, its security in t...
GHSA-X8PV-FGXP-8V3X TYPO3 Allows Information Disclosure via DBAL Restriction Handling
Problem When performing a database query involving multiple tables through the database abstraction layer DBAL, frontend user permissions are only applied via FrontendGroupRestriction to the last table. As a result, data from additional tables included in the same query may be unintentionally...
CVE-2025-47937 TYPO3 Vulnerable to Information Disclosure via DBAL Restriction Handling
TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, when performing a database query involving multiple tables through the database abstraction layer DBAL, frontend...
CVE-2025-47937 TYPO3 Vulnerable to Information Disclosure via DBAL Restriction Handling
TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, when performing a database query involving multiple tables through the database abstraction layer DBAL, frontend...
PT-2025-22139 · Typo3 · Typo3
Name of the Vulnerable Software and Affected Versions: TYPO3 versions 9.0.0 through 9.5.50 ELTS TYPO3 versions 10.0.0 through 10.4.49 ELTS TYPO3 versions 11.0.0 through 11.5.43 ELTS TYPO3 versions 12.0.0 through 12.4.30 LTS TYPO3 versions 13.0.0 through 13.4.11 LTS Description: The issue affects...
[SECURITY] Fedora 41 Update: php-adodb-5.22.9-1.fc41
ADOdb is an object oriented library written in PHP that abstracts database operations for portability. It is modelled on Microsoft's ADO, but has many improvements that make it unique eg. pivot tables, Active Record support, generating HTML for paging recordsets with next and previous links, cach...
CVE-2025-21425
Memory corruption may occur due top improper access control in HAB process...
The vulnerability of the abstraction support system in the OVN virtual network, related to improper access control, allows a intruder to gain unauthorized access to virtual machines and containers that operate on the OVN network.
The vulnerability of the abstraction support system in the OVN virtual network is related to improper access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to virtual machines and containers that operate on the OVN network...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from not maintaining the MSRRI setting when calling RTAS...
RHEL 8 : ovn23.03 (RHSA-2025:1087)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1087 advisory. OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native...