Traccar Security Vulnerabilities

Traccar is the United States Traccar company of a Java-based GPS tracking can provide the function of building the system . The software supports more than 170 kinds of GPS protocols and more than 1500 models of GPS tracking devices . traccar can be used with any major SQL database system . It al...

PT-2024-13959 · Traccar · Traccar

Name of the Vulnerable Software and Affected Versions: Traccar versions prior to 5.11 Description: Traccar, an open source GPS tracking system, is affected by an unrestricted file upload vulnerability in the File feature. This allows attackers to execute arbitrary code on the server. The issue is...

AZL-33891 CVE-2023-49569 affecting package packer for versions less than 1.9.5-3

A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved. Applications are only affected if they are using the ChrootO...

CVE-2024-21603

An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Network Junos OS on MX Series allows a network based attacker with low privileges to cause a denial of service. If a scaled configuration for Source class usage SCU / destination class usage DCU more th...

CVE-2024-0291

creationtimestamp| type| source ---|---|--- 2024-01-11 19:31:32+00:00| seen| https://t.me/ctinow/166738 2024-01-25 08:41:26+00:00| seen| https://t.me/ctinow/173323...

CVE-2023-5118

The application is vulnerable to Stored Cross-Site Scripting XSS in the endpoint /sofer/DocumentService.asc/SaveAnnotation, where input data transmitted via the POST method in the parameters author and text are not adequately sanitized and validated. This allows for the injection of malicious...

PT-2024-14062 · Kofax +1 · Capture +1

Name of the Vulnerable Software and Affected Versions: Software versions prior to 11.1.x Description: The application is vulnerable to Stored Cross-Site Scripting XSS in the endpoint "/sofer/DocumentService.asc/SaveAnnotation", where input data transmitted via the POST method in the parameters...

PT-2024-13632 · Wwbn · Wwbn Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 Description: A cross-site scripting xss vulnerability exists in the function getOpenGraph videoName functionality. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a us...

PT-2024-13424 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 and dev master commit 15fed957fb Description: An information disclosure issue exists in the aVideoEncoder.json.php chunkFile path functionality. A specially crafted HTTP request can lead to arbitrary file read...

PT-2024-13523 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo version 11.6 WWBN AVideo dev master commit 15fed957fb Description: A cross-site scripting xss issue exists in the channelBody.php user name functionality. This allows arbitrary Javascript execution through a specially crafted HTTP...

Microsoft Windows Libarchive Security Vulnerability

Microsoft Windows Libarchive is a C library and command line tool from Microsoft Corporation USA for reading and... A security vulnerability exists in Microsoft Windows Libarchive. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are...

Microsoft Windows Kernel-Mode Drivers Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Kernel-Mode Drivers. An attacker could exploit the vulnerability to elevate privileges. The following products an...

Microsoft Windows Nearby Sharing Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Nearby Sharing. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products...

PT-2024-1083

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows 10 affected versions not specified Windows Server 2022 affected versions not specified Description A security feature bypass in the BitLocker data protection function allows an attacker with...

Microsoft Windows Libarchive Security Vulnerability

Microsoft Windows Libarchive is a C library and command line tool from Microsoft Corporation USA for reading and... A security vulnerability exists in Microsoft Windows Libarchive. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

Medium: java-11-openjdk

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 20.0.2; Oracle GraalVM for JDK: 17.0.8 and 20.0.2. Easily exploitable vulnerability...

Microsoft .NET Framework Security Vulnerabilities

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...

Microsoft Windows Themes Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Themes. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and...

React Native Log Information Disclosure Vulnerability

React Native is an open source JavaScript framework. It is used to build user interfaces and native applications. A log information disclosure vulnerability exists in versions prior to react-native-mmkv v2.11.0, which stems from the insertion of sensitive information into the log files of...

Microsoft Windows Cryptographic Services Security Vulnerability

Microsoft Windows Cryptographic Services is an encryption service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker exploiting this vulnerability could remotely execute code. The following products and edition...