e107 安全漏洞

e107 is a set of open-source, free content management systems CMS developed by the E107 team. It is built using PHP and MySQL. This system supports various plugins and theme options, and can be used for personal blogs, discussion communities, archives, etc. Versions of e107 prior to 2.3.4 contain...

PT-2025-1904 · WordPress · Sellsy Plugin

Name of the Vulnerable Software and Affected Versions: Sellsy plugin for WordPress versions prior to 2.3.4 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'testSellsy' shortcode due to insufficient input sanitization and output escaping on user-supplied attribute...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The program offers multiple payment methods, SMS alerts and product image zoom. A security vulnerability exists in PrestaShop Advanced Loyalty Program: Loyalty Points prior to v2.3.4, which originated fro...

Synology Calendar 跨站请求伪造漏洞

Synology Calendar, a file protection application running on Synology NAS devices from Synology, Taiwan, China, is vulnerable to cross-site request spoofing in versions prior to Synology Calendar 2.3.4-0631, which stems from a webapi component that does not adequately validate that the request is...

PT-2022-16974 · Argo Cd · Argo Cd

Name of the Vulnerable Software and Affected Versions: Argo CD versions prior to 2.3.4 Argo CD versions prior to 2.2.9 Argo CD versions prior to 2.1.15 Description: A vulnerability was found in Argo CD that allows an attacker to spoof error messages on the login screen when single sign on SSO is...

Barrier 资源管理错误漏洞

Barrier is a software that mimics the functionality of the Kvm switcher. A security vulnerability exists in Barrier, which stems from the fact that prior to 2.3.4 Barrier sent Hello messages for each TCP session simultaneously, which could be used by an attacker to cause a segmentation error in t...

PT-2021-21751 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: The implementation of tf.raw ops.SparseDenseCwiseDiv is vulnerable to a division...

Adrian indico 安全漏洞

Adrian indico is an application of Adrian open source . A hierarchical content management system. A security vulnerability exists in versions prior to Adrian indico 2.3.4, which stems from the ability to use an attacker-supplied host header in a password reset link...