777 matches found
CVE-2024-46372
DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...
CVE-2024-46372
DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...
CVE-2024-46372
DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...
PT-2024-31973 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.115 Description: The issue is related to Cross Site Scripting XSS via the advertisement code box in the advertisement management module. This allows for potential malicious script execution. Recommendations: For DedeCMS...
CVE-2024-46372
DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...
CVE-2024-46372
CVE-2024-46372 affects DedeCMS 5.7.115. Vulnerability: Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module. Impact described as potential malicious script execution; no patch/version fix details provided. Mitigations/recommendations from PTSecurity sug...
Ford wants to eavesdrop on passenger conversations to help target ads
Car manufacturer Ford Motor Company has filed a patent application for an in-vehicle advertisement presentation system based on information derived from several trip and driver characteristics. Among those characteristics—human conversations. In the abstract of the patent application publication...
The vulnerability of the ospf_te_parse_ri() function in the OSPF LSA Packet Handler component of the networking routing software for Unix-like systems allows a hacker to cause a service failure.
The vulnerability of the ospfteparseri function in the OSPF LSA Packet Handler component of the networking routing software for Unix-like systems can lead to an out-of-buffer operation. Exploitation of this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the `ospf_te_parse_ext_link()` function in the Opaque LSA Extended Link Parser component of the networking routing implementation software for Unix-like systems allows a hacker to execute arbitrary code.
The vulnerability of the ospfteparseextlink function in the Opaque LSA Extended Link Parser component of the networking routing implementation software for Unix-like systems is related to the escape operation from the buffer into memory. Exploitation of this vulnerability allows a remote attacker...
EulerOS 2.0 SP9 : libndp (EulerOS-SA-2024-2397)
According to the versions of the libndp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a...
EulerOS 2.0 SP10 : libndp (EulerOS-SA-2024-2422)
According to the versions of the libndp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a...
EulerOS 2.0 SP9 : libndp (EulerOS-SA-2024-2372)
According to the versions of the libndp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a...
Huawei EulerOS: Security Advisory for libndp (EulerOS-SA-2024-2372)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libndp (EulerOS-SA-2024-2397)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP10 : libndp (EulerOS-SA-2024-2445)
According to the versions of the libndp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a...
In FRRouting (FRR) through 9.1 there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).
...
ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet because of an attempted access to a missing attribute field.
...
SeaCMS 安全漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version v12.9, which stems from vulnerability to cross-site scripting attacks that allow an...
PT-2024-40892 · Git +1 · Pcapplusplus
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 16 crash has been reported. The crash occurs in the pcpp::NDPNeighborAdvertisementLayer::toString function, which is called b...
Huawei EulerOS: Security Advisory for libndp (EulerOS-SA-2024-2103)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...