1997 matches found
mysql: InnoDB unspecified vulnerability (CPU Oct 2023)
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
PT-2024-14323 · Liferay · Liferay Dxp +1
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.3.45 through 7.4.3.101 Liferay DXP 2023.Q3 before patch 6 Liferay DXP versions 7.4 update 45 through 92 Description: The issue is an open redirect vulnerability in the Countries Management’s edit region page. This...
PT-2024-2227 · Intel · Intel Xtu
Name of the Vulnerable Software and Affected Versions: IntelR XTU versions prior to 7.12.0.29 Description: The issue is related to improper access control in IntelR XTU software, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations:...
PT-2024-2698 · Intel · Intel Optane Pmem 100 Series Management
Name of the Vulnerable Software and Affected Versions: IntelR OptaneTM PMem 100 Series Management Software versions prior to 01.00.00.3547 Description: The issue is related to improper access control in the IntelR OptaneTM PMem 100 Series Management Software, which may allow an authenticated user...
PT-2024-11971 · Rancher · Rancher
Name of the Vulnerable Software and Affected Versions: Rancher versions prior to 2.6.14 Rancher versions prior to 2.7.10 Rancher versions prior to 2.8.2 Description: A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. The issue affects...
PT-2024-15501 · WordPress · The Starbox – The Author Box For Humans
Name of the Vulnerable Software and Affected Versions: The Starbox – the Author Box for Humans plugin for WordPress versions up to, and including, 3.4.7 Description: The issue is related to Insecure Direct Object Reference, which allows subscribers to view plugin preferences and potentially other...
PT-2024-13433 · Connectwise · Connectwise Screenconnect
Name of the Vulnerable Software and Affected Versions: ConnectWise ScreenConnect versions through 23.8.4 Description: The issue allows man-in-the-middle attackers to achieve remote code execution via crafted messages. Recommendations: For ConnectWise ScreenConnect versions through 23.8.4, update ...
PT-2024-14313 · Ylianst · Ylianst Meshcentral
Name of the Vulnerable Software and Affected Versions: Ylianst MeshCentral version 1.1.16 Description: An algorithm-downgrade issue was discovered. Recommendations: For Ylianst MeshCentral version 1.1.16, at the moment, there is no information about a newer version that contains a fix for this...
PT-2024-20050 · Loom · Loom
Name of the Vulnerable Software and Affected Versions: Loom on macOS version 0.196.1 and before Description: An issue in Loom allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. The vendor disputes this issue because it requires local...
PT-2024-1366 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 multi TDE01 Description: The issue is related to the function formWifiWpsOOB and involves a stack-based buffer overflow due to the manipulation of the index argument. This can be exploited remotely, potentially...
PT-2024-2758 · Jenkins +1 · Jenkins Log Command Plugin +2
Name of the Vulnerable Software and Affected Versions: Jenkins Log Command Plugin versions 1.0.2 and earlier Description: The issue is related to the command parser feature in the Jenkins Log Command Plugin, which replaces an '@' character followed by a file path in an argument with the file's...
VulnCheck KEV: CVE-2019-2768
Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
PT-2024-19613 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: A global-buffer-overflow issue was discovered in swftools via the parseExpression function at swftools/src/swfc.c:2587. This issue can potentially lead to a denial of service. Recommendations: For swftools...
PT-2024-1235 · Oracle · Oracle Isupport
Name of the Vulnerable Software and Affected Versions: Oracle iSupport versions 12.2.3 through 12.2.13 Description: The issue exists due to insufficient input validation in the Internal Operations component of Oracle iSupport, part of the Oracle E-Business Suite. This allows a remote attacker to...
PT-2024-15468 · Fireeye · Fireeye Malware Analysis
Name of the Vulnerable Software and Affected Versions: FireEye Malware Analysis AX version 9.0.3.936530 Description: The issue allows an attacker to send a specially crafted JavaScript payload in the application URL to retrieve the session details of a legitimate user. This is achieved by...
PT-2024-6073 · Google +4 · Google Chrome +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.139 Description: The issue is related to an out of bounds read in the V8 component of Google Chrome, allowing a remote attacker to potentially access confidential data by using a specially crafted HT...
PT-2024-1553
Name of the Vulnerable Software and Affected Versions Vinchin Backup & Recovery version 7.2 Description The issue is related to the syncNtpTime function in the SystemHandler.class.php script of Vinchin Backup & Recovery, which fails to neutralize special elements used in the operating system...
PT-2024-1591 · Cisco · Cisco Wap371 Wireless-Ac/N Dual Radio Access Point
Name of the Vulnerable Software and Affected Versions: Cisco WAP371 Wireless-AC/N Dual Radio Access Point AP versions prior to 1.3.0.8 Description: A vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio Access Point could allow an authenticated, remote...
CVE-2023-49128
A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 10. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to execute code in the context of the curre...