498 matches found
GHSA-37GM-H5WR-PF25 Path traversal in redaxo
An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...
CVE-2024-21234
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...
ROS-20241009-03
A vulnerability in the ksmbd component of the Linux kernel is related to NULL pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the vcap component of the Linux operating system kernel is related to memory usage after...
The vulnerability of the gnutls_pkcs7_verify function in the pkcs7 component of the GnuTLS library allows a attacker to cause a service failure.
The vulnerability of the gnutlspkcs7verify function in the pkcs7 component of the GnuTLS library is related to the reallocation of memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
CVE-2024-44871
CVE-2024-44871 affects moziloCMS v3.0. An arbitrary file upload vulnerability exists in the /admin/index.php component that enables an authenticated attacker to achieve arbitrary code execution by uploading a crafted file (e.g., a JPG) and renaming it to PHP via the admin interface. Multiple sour...
CVE-2024-44893
An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request...
CVE-2024-44893
An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request...
CVE-2024-44837
A cross-site scripting XSS vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user parameter...
The vulnerability of the twisted.web network framework’s component, which allows a hacker to disclose protected information
The vulnerability of the twisted.web network framework’s component is related to improper handling of HTTP requests. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the framework...
CVE-2024-42577
A Cross-Site Request Forgery CSRF in the component addproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42584
CVE-2024-42584 affects Warehouse Inventory System v2.0, specifically the delete_product.php component. The CSRF vulnerability allows an unauthenticated attacker to induce a victim to perform privileged actions, enabling privilege escalation. Root cause is insufficient verification of request orig...
CVE-2024-7709 OcoMon URL require_access_recovery.php cross site scripting
A vulnerability, which was classified as problematic, has been found in OcoMon 4.0RC1/4.0/5.0RC1. This issue affects some unknown processing of the file /includes/common/requireaccessrecovery.php of the component URL Handler. The manipulation leads to cross site scripting. The attack may be...
Ivanti Endpoint Manager Mobile 安全漏洞
Ivanti Endpoint Manager Mobile Ivanti EPMM is a mobile management software engine from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager Mobile prior to version 12.1.0.1, which stems from an insecure deserialization vulnerability in the web component that allows ...
The vulnerability of the Security component of the Oracle Retail Xstore Office software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Security component of the Oracle Retail Xstore Office software relates to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
CVE-2024-40546
An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40548
An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-40550
An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...