18726 matches found
PT-2023-26416 · Walchem · Walchem Intuition 9
Name of the Vulnerable Software and Affected Versions: Walchem Intuition 9 firmware versions prior to v4.21 Description: The issue is related to missing authentication for some API routes of the management web server. This could allow an attacker to download and export sensitive data...
Vulnerability fixed in Zimbra
Zimbra has fixed a vulnerability in Zimbra Collaboration. An unauthenticated malicious person could exploit the vulnerability to gain access to a user account and thus potentially gain access to sensitive data in the context of that account. To the best of our knowledge, no user interaction is...
Vulnerabilities fixed in Google Chrome
Google has fixed vulnerabilities in Chrome. A malicious person could exploit the vulnerabilities to execute arbitrary code in the context of the browser, or gain access to sensitive data in the context of the browser. Successful exploitation requires the malicious party to trick the victim into...
CVE-2023-37431
Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and...
PT-2023-19043 · Geomatika · Geomatika Isigeo Web
Name of the Vulnerable Software and Affected Versions: Geomatika IsiGeo Web version 6.0 Description: The issue allows remote authenticated users to obtain sensitive database content via SQL Injection. Recommendations: For Geomatika IsiGeo Web version 6.0, consider restricting access to sensitive...
Vulnerabilities fixed in Sonicwall
SonicWall has fixed vulnerabilities in Global Management System GMS and Analytics. A malicious party could exploit them to launch attacks that could result in the following categories of damage: Manipulation of data. Bypassing authentication Circumvention of security measure Remote code execution...
The vulnerability in the Firefox web browser relates to the insufficient elimination of certain elements in the request, which allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.
The vulnerability in the Firefox web browser is related to insufficient elimination of certain elements in the request. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the XTerm terminal emulator arises from the lack of measures taken to sanitize input data. This allows attackers to gain access to confidential information, compromise its integrity, and cause service failures.
The vulnerability of the XTerm terminal emulator is related to the lack of measures taken to sanitize input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Gstreamer multimedia framework, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Gstreamer multimedia framework is related to a potential integer overflow. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created file...
The vulnerability in the Firefox web browser, related to writing beyond the buffer, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the OpenImageIO image processing library, related to buffer overflows in the stack, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the OpenImageIO image processing library is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through the use of a specially created...
The vulnerability in web browsers Firefox ESR, Firefox, and the email client Thunderbird involves the concealment of important security information. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerabilities in web browsers Firefox ESR, Firefox, and the email client Thunderbird involve the concealment of important security-related information. Exploiting these vulnerabilities can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause servi...
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the ability to write beyond the buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerabilities of web browsers Firefox, Firefox ESR, and the email client Thunderbird are related to buffer overflow attacks. Exploiting these vulnerabilities can allow attackers to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the Gstreamer multimedia framework, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Gstreamer multimedia framework is related to a potential overflow condition. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created file...
The vulnerability of the Apache Airflow Drill Provider network software arises from insufficient validation of input data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Apache Airflow Drill Provider network software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Vulnerabilities fixed in Google Chrome
Google has fixed vulnerabilities in Chrome. A malicious person can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive data Access to...
PT-2023-23537 · Unknown · Online Travel Agency System
Name of the Vulnerable Software and Affected Versions: Online Travel Agency System version 1.0 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the costomer id parameter at the "customer edit.php" endpoint. This enables the attacker to manipulate database...
CVE-2023-20242
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified CM Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated, remote attacker to...
WordPress Plugin Remote Users Sync 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...