77 matches found
Jenkins has a Denial of service vulnerability in HTTP-based CLI
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...
CVE-2016-15054
...
UBUNTU-CVE-2025-49656
Users with administrator access can create databases files outside the files area of the Fuseki server. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which fixes the issue...
CVE-2025-5404
A vulnerability classified as problematic was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This vulnerability affects unknown code of the file /search.php of the component GET Parameter Handler. The manipulation of the argument Search leads to denial of service...
CVE-2025-40635 SQL injection at Comerzzia
SQL injection vulnerability in Comerzzia Backoffice: Sales Orchestrator 3.0.15. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘uidActivity’, ‘codCompany’ and ‘uidInstance’ parameters of the ‘/comerzzia/login’ endpoint...
DEBIAN-CVE-2025-31672
Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...
WordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerability
Unauthenticated Account Takeover vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin K Elements versions 5.4.0...
PT-2024-17487 · WordPress · Print Invoice & Delivery Notes For Woocommerce
Name of the Vulnerable Software and Affected Versions: Print Invoice & Delivery Notes for WooCommerce plugin for WordPress versions up to, and including, 5.4.0 Description: The issue is due to a missing capability check on the wcdn remove shoplogo AJAX action. This makes it possible for...
WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.4.0 - Missing Authorization to Authenticated (Subscriber+) Logo Deletion vulnerability
Missing Authorization to Authenticated Subscriber+ Logo Deletion vulnerability discovered by Tieu Pham Trong Nhan in WordPress Plugin Print Invoice & Delivery Notes for WooCommerce versions = 5.4.0...
PT-2024-34381 · Crmeb · Crmeb
Name of the Vulnerable Software and Affected Versions: CRMEB versions prior to 5.4.0 Description: The issue allows users to bypass the front-end restriction of only being able to claim coupons once. This can be achieved by capturing packets and sending a large number of data packets for coupon...
QNAP Systems Music Station 授权问题漏洞
QNAP Systems Music Station is a music playback and management application from QNAP Systems. An authorization issue vulnerability exists in QNAP Systems Music Station version 5.4.0 and prior versions, which stems from the inclusion of an incorrect authentication vulnerability. An attacker...
CVE-2023-6640
Malformed S2 Nonce Get Command Class packets can be sent to crash PC Controller v5.54.0 and earlier...
SUSE CVE-2022-28069
A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...
SUSE CVE-2022-28070
A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...
CVE-2022-28073
A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...
UBUNTU-CVE-2022-28070
A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...
radare2 缓冲区错误漏洞
radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a heap buffer overflow in the vaxopfunction method...
radare2 资源管理错误漏洞
radare2 is a set of libraries and tools for working with binaries. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a post-release reuse issue in the rregsetvalue method...
SUSE CVE-2022-28805
singlevar in lparser.c in Lua from including 5.4.0 up to excluding 5.4.4 lacks a certain luaKexp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code...