Siemens RUGGEDCOM ROS Information Disclosure Vulnerability

Siemens RuggedCom ROS is an operating system from Siemens, Germany, used in the RuggedCom series of switches. An information disclosure vulnerability exists in Siemens RUGGEDCOM ROS, which can be exploited by an attacker to force a password offline using obtained information...

Microsoft Visual Studio和Microsoft .NET Core 安全漏洞

Microsoft .NET Core and Microsoft Visual Studio are both products of Microsoft Corporation USA. NET Core is a free and open source development platform. NET Core is a free, open source development platform that features multi-language support and cross-platform capabilities.Microsoft Visual Studi...

Splunk Enterprise Security Bypass Vulnerability (CNVD-2024-34266)

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines and cloud. A securit...

MongoDB Input Validation Error Vulnerability (CNVD-2024-31402)

MongoDB is a document-oriented database management system of the U.S. MongoDB company. An input validation error vulnerability exists in MongoDB that stems from incorrectly handling certain string inputs, which can be exploited by an attacker to cause the driver to construct unintended server...

Mattermost Information Disclosure Vulnerability (CNVD-2024-30628)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a message disclosure vulnerability. An attacker can exploit the vulnerability to cause the contents of a message to be read...

PT-2024-4540 · Vmware · Vmware Vcenter Server +2

Name of the Vulnerable Software and Affected Versions: vCenter Server affected versions not specified VMware Cloud Foundation affected versions not specified Description: The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may...

PT-2024-35120 · Mintplex · Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm affected versions not specified Description: An uncontrolled resource consumption issue exists in the "upload-link" endpoint, allowing attackers to cause a denial of service DOS by shutting down the server through...

Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2024-28623)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

Adobe Commerce Cross-Site Scripting Vulnerability (CNVD-2024-28955)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A cross-site scripting vulnerability exists in Adobe Commerce, which can be exploited by an attacker to inject malicious script into vulnerable form...

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2024-28702)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by...

SolarWinds Serv-U FTP Server Directory Traversal Vulnerability

Serv-U FTP Server is a File Transfer Protocol FTP server software. A SolarWinds Serv-U FTP Server directory traversal vulnerability can be exploited by an attacker to read arbitrary files by constructing a malicious request...

WordPress Brave Popup Builder plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting...

PYSEC-2024-242

A Local File Inclusion LFI vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../'. An attacker can...

File Upload Vulnerability in PACS System of Infinera Software (Shanghai) Co.

Infinera is a company specializing in the development of medical imaging systems. A file upload vulnerability exists in the PACS system of Infida Software Shanghai Co. Ltd. that can be exploited by an attacker to gain server privileges...

Online Student Enrollment System SQL Injection Vulnerability (CNVD-2024-26367)

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. A SQL injection vulnerability exists in Online Student Enrollment System version 1.0, which can be exploited by an attacker to view, add, modify, or delete information in the back-en...

Online Student Enrollment System SQL Injection Vulnerability (CNVD-2024-26370)

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. A SQL injection vulnerability exists in Online Student Enrollment System version 1.0, which can be exploited by an attacker to view, add, modify, or delete information in the back-en...

Mattermost Server Access Control Error Vulnerability (CNVD-2024-26102)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. An access control error vulnerability exists in Mattermost Server, which can be exploited by an attacker to bypass access restrictions and view all details of a script run when the run is marked as...

WBSAirback cross-site scripting vulnerability (CNVD-2024-27121)

WBSAirback is a next generation storage and backup system from WBSAirback. A cross-site scripting vulnerability exists in WBSAirback version 21.02.04, which can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a crafted payload...

Adobe Acrobat Reader Resource Management Error Vulnerability (CNVD-2024-24939)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader suffers from a resource management error vulnerability that stems from the presence of post-release reuse, which can be exploited by an attacker...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability. Attackers have exploited the vulnerability to cause a kernel panic...