Adobe Framemaker 代码问题漏洞

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A code issue vulnerability exists in Adobe Framemaker. An attacker could exploit this vulnerability to execute...

Apache XML Graphics FOP 代码问题漏洞

Apache XML Graphics FOP is a Java application for converting XSL-FO files to PDF or other printable formats from the Apache Foundation USA. A code issue vulnerability exists in Apache XML Graphics FOP version 2.9, which stems from the presence of an incorrectly restricted XML external entity...

WordPress plugin Bit File Manager 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

PT-2024-29682 · Unknown · Smart-Tab Android App

Name of the Vulnerable Software and Affected Versions: Smart-tab Android app versions prior to May 2023 Description: The issue concerns an active debug code vulnerability in the Smart-tab Android app. If exploited, an attacker with physical access to the device may use the debug function to acces...

IBM ManageIQ 代码问题漏洞

IBM ManageIQ is an open source cloud management platform from International Business Machines IBM. A code issue vulnerability exists in IBM ManageIQ that stems from allowing a remotely authenticated attacker to execute arbitrary commands on the system by sending a specially constructed request fo...

CVE-2024-44167

The vulnerability CVE-2024-44167 affects several Apple operating systems, including iOS 18 , iPadOS 18 , macOS Sequoia 15 , macOS Sonoma 14.7 , macOS Ventura 13.7 , and visionOS 2 . The root cause involves an improper limitation of a pathname to a restricted directory (Path Traversal), which coul...

CVE-2024-45824

CVE-2024-45824 affects Rockwell Automation FactoryTalk View Site Edition. A remote code execution vulnerability exists when chained with path traversal, command injection, and XSS vulnerabilities, enabling unauthenticated remote code execution. Affected FactoryTalk View Site Edition versions (per...

iniNet Solutions SpiderControl SCADA Web Server 代码问题漏洞

iniNet Solutions SpiderControl SCADA Web Server is a server from iniNet Solutions. A code issue vulnerability exists in iniNet Solutions SpiderControl SCADA Web Server. An attacker could exploit the vulnerability to upload specially crafted malicious files...

Microsoft Windows 代码问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A code issue vulnerability exists in Microsoft Windows. Attackers have exploited the vulnerability to cause a denial of service on the system. The following products...

CVE-2024-8564

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update.php. The manipulation of the argument tblpersonid/firstname/middlename/lastname leads to sql injection. The attack can be initiated...

CVE-2024-7720

HP Security Manager is potentially vulnerable to Remote Code Execution as a result of code vulnerability within the product's solution open-source libraries...

CVE-2024-7720 HP Security Manager - Potential Remote Code Execution

HP Security Manager is potentially vulnerable to Remote Code Execution as a result of code vulnerability within the product's solution open-source libraries...

PT-2024-38533 · Hewlett Packard · Hp Security Manager

Name of the Vulnerable Software and Affected Versions: HP Security Manager affected versions not specified Description: The issue is related to a code vulnerability within the product's solution open-source libraries, potentially allowing Remote Code Execution. Recommendations: At the moment, the...

Ruijie Networks EG2000K 代码问题漏洞

Ruijie Networks EG2000K is a multi-service security gateway from Ruijie Networks China. A code issue vulnerability exists in Ruijie Networks EG2000K version 11.16B2, which originates from the file /tool/index.php?c=download&a=save in unknown code, where manipulation of the parameter content can...

CVE-2022-48897 arm64/mm: fix incorrect file_map_count for invalid pmd

In the Linux kernel, the following vulnerability has been resolved: arm64/mm: fix incorrect filemapcount for invalid pmd The page table check trigger BUGON unexpectedly when split hugepage: ------------ cut here ------------ kernel BUG at mm/pagetablecheck.c:119! Internal error: Oops - BUG:...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in Linux kernel that stems from a failure to pass an explicit offset or count...

YouDianCMS 代码问题漏洞

YouDianCMS YouDian CMS is a website builder from China YouDian Company. A code issue vulnerability exists in YouDianCMS version 7, which stems from the parameter url in the file curlexec /App/Core/Extend/Function/ydLib.php that can lead to server-side request forgery...

IObit DualSafe Password Manager 代码问题漏洞

IObit DualSafe Password Manager is a password manager from IObit. A code issue vulnerability exists in IObit DualSafe Password Manager version 1.4.0.3, which stems from an unknown operation in the RTL120.BPL library that can lead to uncontrolled search paths...

CVE-2024-42096 x86: stop playing stack games in profile_pc()

In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profilepc The 'profilepc' function is used for timer-based profiling, which isn't really all that relevant any more to begin with, but it also ends up making assumptions based on the stack layout...

Online Food Ordering System 代码问题漏洞

Online Food Ordering System is itsourcecode open source online food ordering system. A code issue vulnerability exists in Online Food Ordering System version 1.0, which stems from an incorrect manipulation of the parameter photo that can lead to unrestricted uploads...