Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse vulnerability in the addlock mutex...

Prison Management System add-admin.php File Upload Vulnerability

Prison Management System is a prison management system. A file upload vulnerability exists in Prison Management System version 1.0, which stems from a lack of validation of uploaded files in the avatar parameter of the /Admin/add-admin.php file. This vulnerability can be exploited to remotely...

PT-2024-26479 · Unknown · Campcodes Church Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /admin/add sundaysch.php. The manipulation of the Gender argument leads to sql...

CVE-2024-2125

The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the galleryadd function. This makes it possible for unauthenticated attackers to...

WordPress Plugin EnvíaloSimple 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

UBUNTU-CVE-2024-23084

DISPUTED Apfloat v1.10.1 was discovered to contain an ArrayIndexOutOfBoundsException via the component org.apfloat.internal.DoubleCRTMath::adddouble, double. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerabilit...

Netentsec NS-ASG Application Security Gateway SQL注入漏洞

NetentSec NS-ASG Application Security Gateway is an application security gateway from China NetentSec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from an SQL injection vulnerability in the parameter SingleLoginId in the file...

PT-2024-19663

Name of the Vulnerable Software and Affected Versions Apfloat version 1.10.1 Description The issue is related to an ArrayIndexOutOfBoundsException in the org.apfloat.internal.DoubleCRTMath::adddouble, double component. However, it is noted that the existence of this vulnerability is disputed by...

Apfloat 安全漏洞

Apfloat is a high-performance arbitrary-precision arithmetic library from the individual developer Mikko Tommila. A security vulnerability exists in Apfloat version v1.10.1, which stems from a null pointer exception contained in the component org.apfloat.internal.DoubleCRTMath adddouble, double...

PT-2024-25828 · Sourcecodester · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue affects the Avatar Handler component, specifically the file /Admin/add-admin.php. The manipulation of the avatar argument leads to unrestricted upload. This iss...

CVE-2024-3369

A vulnerability, which was classified as critical, has been found in code-projects Car Rental 1.0. Affected by this issue is some unknown functionality of the file add-vehicle.php. The manipulation of the argument Upload Image leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2024-3369 code-projects Car Rental add-vehicle.php unrestricted upload

A vulnerability, which was classified as critical, has been found in code-projects Car Rental 1.0. Affected by this issue is some unknown functionality of the file add-vehicle.php. The manipulation of the argument Upload Image leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2024-3369

CVE-2024-3369 affects code-projects Car Rental 1.0. The vulnerability is in add-vehicle.php, where manipulation of the Upload Image parameter enables unrestricted file upload. This can be exploited remotely and has been disclosed publicly, classed as critical with high impact to confidentiality, ...

Simple Car Rental System 代码问题漏洞

Simple Car Rental System is a simple car rental application. A code issue vulnerability exists in version 1.0 of Simple Car Rental System due to a file upload vulnerability in the parameter Upload Image of the file add-vehicle.php...

PT-2024-25445 · Unknown · Code-Projects Car Rental

Name of the Vulnerable Software and Affected Versions: code-projects Car Rental version 1.0 Description: A critical issue has been found in the code-projects Car Rental software. The problem affects some unknown functionality of the file add-vehicle.php. The manipulation of the Upload Image...

AZL-44382 CVE-2024-31083 affecting package xorg-x11-server 1.20.10-6

A use-after-free vulnerability was found in the ProcRenderAddGlyphs function of Xorg servers. This issue occurs when AllocateGlyph is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently,...

GHSA-W67V-PH4X-F48Q Mattermost Server Improper Access Control

Improper Access Control in Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x before 8.1.11 lacked proper access control in the /api/v4/users/me/teams endpoint allowing a team admin to get the invite ID of their team, thus allowing them to invite users,...

SUSE CVE-2024-31083

A use-after-free vulnerability was found in the ProcRenderAddGlyphs function of Xorg servers. This issue occurs when AllocateGlyph is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently,...

SourceCodester Aplaya Beach Resort Online Reservation System SQL注入漏洞

Aplaya Beach Resort Online Reservation System is the online room reservation system for Aplaya Beach Resort. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Aplaya Beach Resort Online Reservation System due to an SQL injection in the name parameter of the...

PT-2024-25327 · Sourcecodester · Aplaya Beach Resort Online Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 Description: A critical issue affects some unknown functionality of the file admin/mod settings/controller.php?action=add. The manipulation of the type argument leads to...