3236 matches found
PT-2024-3642 · Microsoft +7 · Visual Studio +8
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Microsoft .NET affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource. It may allow a remote attacker to cause a denial o...
UBUNTU-CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability...
May 14, 2024-KB5038286 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2
None None...
LG Simple Editor 安全漏洞
LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete a system by sending...
Delta Electronics DIAEnergie 路径遍历漏洞
Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. A path traversal vulnerability exists in Delta Electronics DIAEnergie, which can be exploited by an attacker to write an arbitrary file on the system by sending a specially crafted URL...
LG Simple Editor 安全漏洞
LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A directory traversal arbitrary file deletion vulnerability exists in LG Simple Editor, which can be exploited by an attacker to delete a system by sending...
Simplcommerce 安全漏洞
Simplcommerce is a .Net based e-commerce platform by the individual developer of Simplcommerce. A security vulnerability exists in Simplcommerce. A remote attacker can exploit the vulnerability to execute arbitrary code in the search bar function via a specially crafted script...
CVE-2022-48634
Summary of CVE-2022-48634 (Linux kernel) : Affects the gma500/GPU path in the Linux kernel. The fault was that gma_crtc_page_flip() held the event_lock spinlock while calling crtc_funcs->mode_set_base(), which takes ww_mutex, creating a sleeping context in an invalid path. The unlock should oc...
CVE-2022-48634 drm/gma500: Fix BUG: sleeping function called from invalid context errors
In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix BUG: sleeping function called from invalid context errors gmacrtcpageflip was holding the eventlock spinlock while calling crtcfuncs-modesetbase which takes wwmutex. The only reason to hold eventlock is to clear...
AZL-40168 CVE-2024-26882 affecting package kernel for versions less than 6.6.29.1-3
In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: make sure to pull inner header in iptunnelrcv Apply the same fix than ones found in : 8d975c15c0cd "ip6tunnel: make sure to pull inner header in ip6tnlrcv" 1ca1ba465e55 "geneve: make sure to pull inner header in...
CVE-2024-21044
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Less 安全漏洞
Less is a text-finding application open-sourced by gwsw. A security vulnerability exists in Less version 653 and earlier versions, which stems from improper handling of references in filename.c. The vulnerability is caused by the use of a reference in the filename.c file...
HadSky 安全漏洞
HadSky is an original open source php lightweight forum system by the Chinese company HadSky. A security vulnerability exists in HadSky v7.6.3, which stems from a Reflective Cross-Site Scripting XSS vulnerability that allows remote attackers to execute arbitrary code and obtain sensitive...
Microsoft .NET和Microsoft Visual Studio 安全漏洞
Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...
GitPython: Blind local file inclusion
A path traversal vulnerability was found in GitPython due to an input validation error when reading from the ".git" directory. This issue may allow a remote attacker to prepare a specially crafted ".git" file with directory traversal characters in file names and force the application to read thes...
WordPress Tax Rate Upload plugin <= 2.4.5 - CSRF leading to Cross Site Scripting (XSS) vulnerability
CSRF leading to Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Tax Rate Upload versions = 2.4.5...
SUSE CVE-2024-2955
T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file...
The vulnerability of the Microsoft .NET Framework software platform, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Microsoft .NET Framework software platform is related to insufficient protection of service data when processing ObjRef objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Delta Electronics DIAEnergie 路径遍历漏洞
Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China, for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and...