671 matches found
CVE-2022-46707
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
Wacom Driver 后置链接漏洞
Wacom driver is a driver for connecting and managing platform computers. A security vulnerability exists in Wacom Driver 6.3.46-1 and earlier versions that stems from an arbitrary file deletion vulnerability...
SUSE CVE-2023-26437
Denial of service vulnerability in PowerDNS Recursor allows authoritative servers to be marked unavailable.This issue affects Recursor: through 4.6.5, through 4.7.4 , through 4.8.3...
PT-2023-2254 · Samba +6 · Samba +6
Name of the Vulnerable Software and Affected Versions: Samba versions prior to 4.6.16 Samba versions prior to 4.7.9 Samba versions prior to 4.8.4 Samba versions prior to 4.9.7 Description: The issue is related to insufficient protection of service data, which may allow a remote attacker to disclo...
PT-2023-17166 · Xunruicms · Xunruicms
Name of the Vulnerable Software and Affected Versions: Xunrui CMS version 4.61 Description: A vulnerability was found in Xunrui CMS, affecting some unknown functionality of the file /dayrui/Fcms/View/system log.html. This issue leads to information disclosure and can be exploited remotely...
Cynet Client Agent 安全漏洞
Cynet Client Agent is a client agent from Cynet Corporation. A security vulnerability exists in Cynet Client Agent version 4.6.0.8010, which stems from a vulnerability that allows EDR protection to be disabled via a process's privilege token...
SUSE CVE-2023-0950
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet...
CVE-2023-24734
An arbitrary file upload vulnerability in the cameraupload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file...
PT-2023-19760 · Pmb · Pmb
Name of the Vulnerable Software and Affected Versions: PMB version 7.4.6 Description: A remote code execution RCE issue was discovered in PMB via the component /sauvegarde/restaure act.php. Recommendations: For PMB version 7.4.6, as a temporary workaround, consider restricting access to the...
PMB 资源管理错误漏洞
PMB is a 100% free document management reference tool from the PMB Services team. A security vulnerability exists in PMB version v7.4.6, which stems from an arbitrary file upload vulnerability contained in the cameraupload.php component. An attacker could exploit the vulnerability to execute...
PT-2023-19759 · Pmb · Pmb
Name of the Vulnerable Software and Affected Versions: PMB version 7.4.6 Description: The issue allows attackers to redirect victim users to an external domain via a crafted URL, exploiting an open redirect vulnerability in the /opac css/pmb.php component. Recommendations: For PMB version 7.4.6,...
Tftpd64 代码问题漏洞
Tftpd64 is a free, lightweight, open source IPv6-ready application that includes DHCP, TFTP, DNS, SNTP, and Syslog servers as well as TFTP clients. A code issue vulnerability exists in Tftpd64 version 4.64, which stems from a search path containing spaces or other separators...
SUSE CVE-2012-4166
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4165. Reason: This candidate is a duplicate of CVE-2012-4165. Notes: All CVE users should reference CVE-2012-4165 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...
SUSE CVE-2015-1208
Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file...
SUSE CVE-2016-5732
Multiple cross-site scripting XSS vulnerabilities in the partition-range implementation in templates/table/structure/displaypartitions.phtml in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via crafted table parameters...
SUSE CVE-2016-6608
XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...
SUSE CVE-2016-6620
An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize function without verification that it's valid serialized data. The unserialization can result in code execution because of the interaction with object instantiation and autoloading. All 4.6.x versions prior to 4.6.4...
SUSE CVE-2016-9856
An XSS issue was discovered in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10. This issue is resolved by using a copy of a hash to avoid a race condition. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are...