CVE-2024-47297: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Polls cp-polls allows Reflected XSS.This issue affects CP Polls: from n/a through = 1.0.74...

CVE-2024-46261

cutepng v1.05 was discovered to contain a heap buffer overflow via the cpmake32 function at cutepng.h...

PT-2024-31937

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description A heap buffer overflow issue was discovered via the cp make32 function at cute png.h. Recommendations For cute png version 1.05, consider disabling the cp make32 function as a temporary workaround until a patc...

PT-2024-31935

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description A heap buffer overflow issue was discovered via the cp unfilter function at cute png.h. Recommendations For cute png version 1.05, consider disabling the cp unfilter function as a temporary workaround until a...

cute_png 缓冲区错误漏洞

cutepng is an application of cutepng open source. A buffer error vulnerability exists in cutepng version 1.05, which stems from a heap buffer overflow vulnerability contained in the cpunfilter function at cutepng.h. The vulnerability is caused by the use of the cpunfilter function...

PT-2024-31942 · Cute Png · Cute Png

Name of the Vulnerable Software and Affected Versions: cute png version 1.05 Description: A heap buffer overflow issue was discovered in the cp stored function at cute png.h. This issue can be exploited via the cp stored function. Recommendations: For cute png version 1.05, consider disabling the...

PT-2024-31934

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description The issue is related to a heap buffer overflow in the cp load png mem function, located at cute png.h. This overflow can be triggered, potentially leading to unspecified consequences. Recommendations For cute...

PT-2024-31939

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description The issue is related to a heap buffer overflow that can be triggered via the cp find function located at cute png.h. Recommendations For cute png version 1.05, consider disabling the cp find function as a...

PT-2024-31940

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description A heap buffer overflow issue was discovered via the cp block function at cute png.h. Recommendations For cute png version 1.05, consider disabling the cp block function as a temporary workaround until a patch ...

PT-2024-31943

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description A heap buffer overflow issue was discovered via the cp chunk function at cute png.h. Recommendations For cute png version 1.05, consider disabling the cp chunk function as a temporary workaround until a patch ...

WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin CP Polls versions = 1.0.74...

WordPress CP Polls Plugin <= 1.0.74 is vulnerable to Cross Site Scripting (XSS)

Software CP Polls Type Plugin Vulnerable versions = 1.0.74 Fixed in 1.0.75 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47297 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bd0fc6118ee8 Credits Muhamad Agil Fachrian Required...

PT-2024-29313 · Alibaba · Aliyuncontainerservice Pouch

Name of the Vulnerable Software and Affected Versions: AliyunContainerService pouch version 1.3.1 Description: A symlink following vulnerability in the pouch cp function of AliyunContainerService pouch allows attackers to escalate privileges and write arbitrary files. Recommendations: For...

CVE-2024-41228: Improper Privilege Management

A symlink following vulnerability in the pouch cp function of AliyunContainerService pouch v1.3.1 allows attackers to escalate privileges and write arbitrary files...

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service interruptions.

The vulnerability of the web servers of microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the d_expression_1 function in the cp-demangle.c component of the GNU Binutils development environment, which involves reading data beyond the allowable buffer limits, allows a attacker to cause a service failure.

The vulnerability of the dexpression1 function in the cp-demangle.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Siemens Industrial Product Null Pointer Dereference Vulnerability (CNVD-2024-38015)

SIMATIC CP 1242 and CP 1243 associated processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other data encryption protocols.SIMATIC HMI Panels are used for operator...

CVE-2023-30756

A vulnerability has been identified in SIMATIC CP 1242-7 V2 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 DNP3 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 IEC incl. SIPLUS variants All versions V3.5.20...

CVE-2023-30755

A vulnerability has been identified in SIMATIC CP 1242-7 V2 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 DNP3 incl. SIPLUS variants All versions V3.5.20, SIMATIC CP 1243-1 IEC incl. SIPLUS variants All versions V3.5.20...

CVE-2023-30755

Siemens CVE-2023-30755 is a NULL POINTER DEREFERENCE affecting multiple SIMATIC/Siemens products (e.g., CP 1242-7 V2, CP 1243 variants, HMI Comfort Panels, IPC DiagBase/DiagMonitor, WinCC Runtime Advanced, SIPLUS TIM 1531 IRC, TIM 1531 IRC). The web server does not properly handle shutdown/reboot...