9629 matches found
PT-2024-35438 · Dcme-320 +3 · Dcme-320 +3
Name of the Vulnerable Software and Affected Versions: DCME-320 versions 7.4.12.90 and earlier DCME-520 versions 9.25.5.11 and earlier DCME-320-L versions 9.3.5.26 and earlier DCME-720 versions 9.1.5.11 and earlier Description: The issue allows for Remote Code Execution via the...
PT-2024-28372
Name of the Vulnerable Software and Affected Versions pyspider versions 0.3.10 and earlier Description The issue allows for Cross Site Scripting XSS via the /update endpoint. This affects products that are no longer supported by the maintainer. Recommendations For versions 0.3.10 and earlier, as ...
PT-2024-33097 · Unknown · Sunbk201 Umicat
Name of the Vulnerable Software and Affected Versions: SunBK201 umicat versions 0.3.2 and earlier Description: The issue allows an attacker to execute arbitrary code via the poweruct int t x, uct int t n function in src/uct upstream.c. This can be exploited to perform local network attacks...
PT-2024-17364 · Guangzhou Huayi Intelligent Technology · Jeewms
Name of the Vulnerable Software and Affected Versions: Guangzhou Huayi Intelligent Technology Jeewms version 3.7 Description: A problematic issue affects the function preHandle of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. The manipulation of the argument request...
PT-2024-16745 · Tumult · Tumult Hype Animations
Name of the Vulnerable Software and Affected Versions: Tumult Hype Animations plugin for WordPress versions up to, and including, 1.9.15 Description: The Tumult Hype Animations plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the hypeanimations...
PT-2024-17366 · Unknown · Code-Projects Responsive Hotel Site
Name of the Vulnerable Software and Affected Versions: code-projects Responsive Hotel Site version 1.0 Description: A critical issue has been found in the file /admin/room.php, where the manipulation of the troom argument leads to SQL injection. This issue can be exploited remotely...
PT-2024-10652 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue allows for local escalation of privilege or information disclosure due to uninitialized data or a pending intent. This could lead to accessing user metadata or local informati...
PT-2024-39751
Name of the Vulnerable Software and Affected Versions File Manager Pro – Filester plugin for WordPress versions up to, and including, 1.8.5 Description The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion via the fm locale parameter. This allows...
CVE-2024-41126 Out-of-bounds read when decoding SNMP messages in Contiki-NG
Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The...
CLSA-2024-1732704094 squid: Fix of CVE-2024-45802
CVE-2024-45802: disable ESI...
squid: Fix of CVE-2024-45802
CVE-2024-45802: disable ESI...
CLSA-2024-1732702350 squid: Fix of CVE-2024-45802
CVE-2024-45802: disable ESI...
CLSA-2024-1732702216 squid34: Fix of CVE-2024-45802
CVE-2024-45802: disable ESI...
squid34: Fix of CVE-2024-45802
CVE-2024-45802: disable ESI...
CLSA-2024-1732701268 Fix CVE(s): CVE-2024-45802
SECURITY UPDATE: Fix DoS by a trusted server by disable ESI - CVE-2024-45802...
CLSA-2024-1732699822 Fix CVE(s): CVE-2024-45802
SECURITY UPDATE: Fix DoS by a trusted server by disable ESI - CVE-2024-45802...
SUSE CVE-2024-52811
The ngtcp2 project is an effort to implement IETF QUIC protocol in C. In affected versions acks are not validated before being written to the qlog leading to a buffer overflow. In ngtcp2conn::connrecvpkt for an ACK, there was new logic that got added to skip connrecvack if an ack has already been...
PT-2024-35797 · Unknown · Phpgurukul Covid19 Testing Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID 19 Testing Management System version 1.0 Description: A Reflected Cross Site Scripting XSS issue was found in the /covid-tms/patient-search-report.php endpoint, which allows remote attackers to execute arbitrary code via the...
PT-2024-29281 · Unknown · Contiki-Ng
Name of the Vulnerable Software and Affected Versions: Contiki-NG affected versions not specified Description: An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The issue exists in the...
GHSA-7P9F-6X8J-GXXP CRI-O: Maliciously structured checkpoint file can gain arbitrary node access
Impact Patches 1.31.1, 1.30.6, 1.29.8 Workarounds set enablecriusupport = false References Are there any links users can visit to find out more?...