Vulnerability of the close_altfile() function (filename.c) for UNIX-like system text terminals: allowing attackers to execute arbitrary commands

The vulnerability of the closealtfile function filename.c for UNIX-like system text terminals is related to the omission of the Shellquote call for LESSCLOSE. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

ZenML Code Issue Vulnerability

ZenML is an extensible open source MLOps framework for creating portable, production-ready machine learning pipelines. A code issue vulnerability exists in ZenML version 0.56.3 that stems from an insufficient session validity period. An attacker exploiting this vulnerability could reuse old sessi...

LangChain Code Issues Vulnerabilities

LangChain is an application built using LLM through composability. LangChain has a code issue vulnerability that stems from a server-side request forgery SSRF vulnerability in the Web Research Retriever component...

LoLLMs Code Issue Vulnerability

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. LoLLMs suffers from a code issue vulnerability that stems from not adequately validating user-entered URLs and a server-side request forgery SSRF vulnerability that could allow an attacker to...

IBM Security Guardium Code Issue Vulnerability (CNVD-2024-24727)

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium suffers from a code issue vulnerabili...

Adobe Animate Code Issue Vulnerability (CNVD-2024-24290)

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. A code issue vulnerability exists in Adobe Animate versions 24.0.2 and 23.0.5, which stems from being affected by a null pointer dereference vulnerability. An attacker could use this vulnerability to cause...

SourceCodester Online Discussion Forum Site 代码问题漏洞

SourceCodester Online Discussion Forum Site is an application from SourceCodester, Inc. An online discussion forum. A code issue vulnerability exists in SourceCodester Online Discussion Forum Site version 1.0, which stems from an incorrect manipulation of the parameter ima that can lead to...

Best Courier Management System 代码问题漏洞

Best Courier Management System is a courier management system by Mayuri K., a personal developer. A code issue exists in version 1.0 of the Best Courier Management System where an incorrect manipulation of the parameter id can result in unrestricted uploads...

D-Link DAR-7000 代码问题漏洞

The D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A code issue vulnerability exists in the D-Link DAR-7000-40 V31R02B1413C version, which stems from an incorrect operation of the parameter fileupload that can result in an unrestricted upload...

E-Commerce Site Code Issue Vulnerability

E-Commerce Site is an e-commerce website. A code issue vulnerability exists in E-Commerce Site version 1.0, which stems from admin/addproduct.php containing unknown code that causes unrestricted uploads via the parameter profilepic...

D-Link DAR-7000 代码问题漏洞

The D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A code issue vulnerability exists in the D-Link DAR-7000-40 V31R02B1413C version, which stems from an incorrect operation of the parameter fileupload that can result in an unrestricted upload...

OmniCore robot 代码问题漏洞

OmniCore robot is a robotics application. A code issue vulnerability exists in ABB IRC5, OmniCore. An attacker could cause the robot to stop, making the robot controller inaccessible...

SolarWinds Access Rights Manager 代码问题漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds, Inc. A code issue vulnerability exists in versions of SolarWinds Access Rights Manager prior to 2023.2.4, which stems from susceptibility to remote code execution vulnerabilities...

Progress Software WhatsUp Gold 代码问题漏洞

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A code issue vulnerability exists in Progress Software WhatsUp Gold versions prior to...

B&R Industrial Automation多款产品 代码问题漏洞

B&R Industrial Automation Scene Viewer and others are products of B&R Industrial Automation, an Austrian company.B&R Industrial Automation Scene Viewer is a visualization tool for visualizing and simulating scenarios in industrial automation systems.B&R Industrial Automation Runtime is a real-tim...

Microsoft Excel 代码问题漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A code issue vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Office Online Server,Microsoft Office 2019 for 32-bit editions,Microsoft Office 20...

IBM Security Guardium 代码问题漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium suffers from a code issue vulnerabili...

IBM UrbanCode Deploy Code Issue Vulnerability (CNVD-2024-20490)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from International Business Machines IBM. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different...

WordPress Plugin Wappointment 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

Adobe Animate Code Issue Vulnerability (CNVD-2024-19003)

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate has a code issue vulnerability that stems from the application being susceptible to NULL pointer dereferencing, which can be exploited by an attacker to cause a system crash, resulting in a...