PT-2024-2895 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions prior to 5.4 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as a Cross-site Scripting XSS vulnerability. This could allow a low-privileged attacker with remo...

PT-2024-3208 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions prior to 5.4 Description: The issue is related to an OS Command Injection Vulnerability in the svc topstats utility of the Dell Unity Operating Environment. This vulnerability exists due to the lack of measures to neutrali...

WordPress plugin Directorist security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in the...

PT-2024-1092 · D Link · D-Link Dcs-8300Lhv2

Name of the Vulnerable Software and Affected Versions: D-Link DCS-8300LHV2 affected versions not specified Description: The issue is related to a buffer overflow in the RTSP server of D-Link DCS-8300LHV2 IP cameras, allowing remote attackers to execute arbitrary code on affected installations. Th...

CVE-2023-23634

SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint...

NULL Pointer Exception bug that can be used by a remote attacker

handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. Products Confirmed Not Affected Brocade Fabri...

PT-2023-26262 · Unknown · Revive Adserver

Name of the Vulnerable Software and Affected Versions: Revive Adserver versions 5.4.1 and earlier Description: A reflected XSS vulnerability exists. This issue may allow attackers to inject malicious scripts into websites, potentially leading to unauthorized access or control of user sessions...

Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability.

...

PYSEC-2023-159

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

CVE-2023-32241

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin = 5.4.8 versions...

PT-2023-6289 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.5.4 Description: The issue is related to a use-after-free error in the ext4 file system driver of the Linux kernel, specifically in the fs/ext4/extents status.c file, related to the ext4 es insert extent...

SUSE CVE-2022-28069

A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...

SUSE CVE-2022-28070

A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...

CVE-2022-28073

A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...

UBUNTU-CVE-2022-28070

A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...

radare2 资源管理错误漏洞

radare2 is a set of libraries and tools for working with binaries. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a post-release reuse issue in the rregsetvalue method...

radare2 缓冲区错误漏洞

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a heap buffer overflow in the vaxopfunction method...

CVE-2023-28711

Insufficient control flow management in the Hyperscan Library maintained by IntelR before version 5.4.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-37372

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.4. The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database...

PT-2023-21920 · Unknown · Hyperscan Library

Name of the Vulnerable Software and Affected Versions: Hyperscan Library versions prior to 5.4.1 Description: Insufficient control flow management in the Hyperscan Library may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions prior...