30997 matches found
EulerOS 2.0 SP12 : golang (EulerOS-SA-2024-2927)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an 'Expect: 100-continue' header with a non-information...
Astra Linux – Vulnerability in bluez
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability, as the target must connect...
CVE-2024-7392
ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. Authentication is not required to exploit this vulnerabilit...
CVE-2024-7392 ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability
ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. Authentication is not required to exploit this vulnerabilit...
Exploit for CVE-2023-38646
Metabase Pre-Authentication RCE CVE-2023-38646 CVE-2023-38...
Exploit for OS Command Injection in Zimbra Collaboration
CVE-2024-45519 CVE-2024-45519 is a high-risk vulnerability in...
CVE-2024-50294
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing locking causing hanging calls If a call gets aborted e.g. because kafs saw a signal between it being queued for connection and the I/O thread picking up the call, the abort will be prioritised over the connecti...
CVE-2024-11588
A vulnerability was found in AVL-DiTEST-DiagDev libdoip 1.0.0. It has been rated as problematic. This issue affects the function DoIPConnection::reactOnReceivedTcpMessage of the file DoIPConnection.cpp. The manipulation leads to null pointer dereference...
waitress: python-waitress: request processing race condition in HTTP pipelining with invalid first request
A flaw was found in the Waitress WSGI server for Python. A remote client can send a request that is exactly recvbytes, which defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default, Waitress won't read any more requests, and when th...
CVE-2024-51636
Cross-Site Request Forgery CSRF vulnerability in Z.com byGMO GMO Social Connection gmo-social-connection allows Cross-Site Scripting XSS.This issue affects GMO Social Connection: from n/a through = 1.2...
CVE-2024-51636
CVE-2024-51636 corresponds to a CSRF to Stored XSS vulnerability in the GMO Social Connection WordPress plugin (versions <= 1.2). The issue, defined as CSRF enabling XSS, affects that plugin as described in multiple feeds (including Patchstack/Red Hat/NVD references). No explicit fix version i...
CVE-2024-51636 WordPress Plugin Name: GMO Social Connection plugin <= 1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Z.com byGMO GMO Social Connection gmo-social-connection allows Cross-Site Scripting XSS.This issue affects GMO Social Connection: from n/a through = 1.2...
CVE-2024-51636 WordPress Plugin Name: GMO Social Connection plugin <= 1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Z.com byGMO GMO Social Connection gmo-social-connection allows Cross-Site Scripting XSS.This issue affects GMO Social Connection: from n/a through = 1.2...
Exploit for Improper Authentication in Microsoft
PoC exploit for CVE-2024-49039, a vulnerability in Windows Task...
waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion
A flaw was found in the Waitress WSGI server for Python. When a remote client closes the connection before waitress has had the opportunity to call getpeername, waitress will incorrectly clean up the connection, leading to the main thread attempting to write to a socket that no longer exists, and...
Man-in-the-middle(MitM) Attack
libnbd is vulnerable to a Man-in-the-middleMitM Attack. The vulnerability is due to the client failing to consistently verify the NBD server's certificate when using TLS to connect, which allows an attacker to intercept and manipulate the NBD traffic...
PT-2024-34780 · Unknown · Gmo Social Connection
Name of the Vulnerable Software and Affected Versions: GMO Social Connection versions 1.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Cross-Site Scripting XSS. This means an attacker could potentially trick a user into performi...
WordPress plugin GMO Social Connection 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
Unable to Interact with Some Hypervisors and Cloud Platforms
Veeam Backup & Replication 13.0.1 Upgrade Warning During the upgrade to Veeam Backup & Replication 13.0.1 or higher, the following warning may be displayed: Incompatible backup server certificate The certificate does not support child certificates creation and must be replaced for virtualization...