MGASA-2023-0147 Updated thunderbird packages fix security vulnerability

Fullscreen notification obscured. CVE-2023-29533 Double-free in libwebp. MFSA-TMP-2023-0001 Potential Memory Corruption following Garbage Collector compaction. CVE-2023-29535 Invalid free from JavaScript code. CVE-2023-29536 Revocation status of S/Mime recipient certificates was not checked...

DataGear 代码问题漏洞

DataGear is an open source and free data visualization and analysis platform from DataGear, Inc. A code issue vulnerability exists in DataGear versions prior to 4.5.1, which stems from a problem with the component JDBC server handler that can lead to deserialization...

Froxlor 代码问题漏洞

Froxlor is a lightweight server management software from the Froxlor team. A code issue vulnerability exists in Froxlor versions prior to 2.0.14, which stems from the presence of unrestricted uploads of dangerous types of files...

Qualcomm Chipsets 代码问题漏洞

Qualcomm Chipsets are a series of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets. An attacker exploiting this vulnerability could cause a denial of service...

Siemens SIPROTEC 5 代码问题漏洞

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. A code issue vulnerability exists in the Siemens SIPROTEC 5 that stems from a lack of proper validation of the http request parameters of the hosted web service, which can be exploited by an attacker to send specially crafted...

tpAdmin 代码问题漏洞

tpAdmin is a ThinkPHP5 based administration backend. A code issue vulnerability exists in yuan1994 tpAdmin version 1.3.12, which stems from an incorrect manipulation of the parameter file resulting in unrestricted uploads...

GLPI 代码问题漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

Online Graduate Tracer System 代码问题漏洞

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A code issue vulnerability exists in SourceCodester Online Graduate Tracer System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vend...

Apache OpenOffice Code Issue Vulnerability

Apache OpenOffice is an open source office software suite from the U.S. Apache Apache Foundation. The suite contains text documents , spreadsheets , presentations , drawings , databases and so on. A code issue vulnerability exists in Apache OpenOffice versions prior to 4.1.14, which stems from th...

Google TensorFlow 代码问题漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. A code issue vulnerability exists in Google TensorFlow version 2.12 prior to version 2.12.0 and version 2.11 prior to version 2.11.1, which stems from the Lookup function...

Google TensorFlow 代码问题漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. A code issue vulnerability exists in Google TensorFlow version 2.12 prior to version 2.12.0 and version 2.11 prior to version 2.11.1, which stems from the fact that when t...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from a possible logic error in the code...

baserCMS 代码问题漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A code issue vulnerability exists in versions of baserCMS prior to 4.7.5, which stems from a Remote Code Execution RCE vulnerability in the management system of baserCMS...

Schneider Electric IGSS Data Server代码问题漏洞

Schneider Electric IGSS Data Server is a data server for the interactive graphical Scada system from Schneider Electric France. A code issue vulnerability exists in Schneider Electric IGSS Data Server, which can be exploited by attackers to cause remote code execution...

VISAM VBASE 代码问题漏洞

VISAM VBASE is a data acquisition and monitoring system from VISAM Germany. A code issue vulnerability exists in VISAM VBASE Automation Base versions prior to 11.7.5 that stems from the presence of an information leak...

Schneider Electric IGSS Data Server Code Issue Vulnerability

Schneider Electric IGSS Data Server is a data server for the interactive graphical Scada system from Schneider Electric France. A code issue vulnerability exists in Schneider Electric IGSS Data Server, which can be exploited by attackers to cause remote code execution...

Filseclab Twister Antivirus 代码问题漏洞

Filseclab Twister Antivirus is an intelligent antivirus software from Fair Filseclab. A code issue vulnerability exists in Filseclab Twister Antivirus version 8, which stems from an unknown process found in fildds.sys, resulting in a denial of service...

Linux kernel code issue vulnerability (CNVD-2023-34471)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in Linux kernel version 6.2.6 and earlier versions, which stems from a missing locksock call in the dotlsgetsockopt function in...

Mozilla Firefox Code Problem Vulnerability (CNVD-2023-68213)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a code issue vulnerability that stems from the fact that by displaying a prompt with a long description, a full-screen notification may be hidden, which can be exploited by...

Simple Art Gallery 代码问题漏洞

Simple Art Gallery is an art gallery application from Simple Art Gallery, Inc. A code issue vulnerability exists in Simple Art Gallery version 1.0 that stems from a problem with the function sliderPicSubmit in the file adminHome.php, which can lead to unrestricted uploads...