609 matches found
CVE-2024-41595
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via .cgi pages because of missing bounds checks on read and write operations...
DrayTek Vigor 3910 安全漏洞
The DrayTek Vigor 3910 is a high-performance router for enterprise networks from DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version 4.3.2.6 and prior versions, which is caused by a stack-based overflow when processing query string parameters...
OESA-2024-2194 assimp security update
Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: Heap-based buffer overflow...
Puma 安全漏洞
Puma is a web server for highly concurrent applications by Evan Phoenix, an individual developer in the United States. A security vulnerability exists in Puma versions prior to 6.4.3, which stems from a client being able to override values set by an intermediate proxy by supplying an underscored...
CVE-2024-6343
creationtimestamp| type| source ---|---|--- 2024-09-03 04:55:48+00:00| seen| https://t.me/cvedetector/4664 2024-09-04 12:00:00+00:00| seen| https://t.me/truesecator/6165 2024-09-05 08:37:49+00:00| seen| https://vulnerability.circl.lu/bundle/c854b418-a4e1-4135-958a-a523843c27f0...
WordPress plugin CM Tooltip Glossary 跨站脚本漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin CM Tooltip Glossary versi...
PT-2024-12282 · Unknown · Fluid Topics
Name of the Vulnerable Software and Affected Versions: Fluid Topics versions prior to 4.3 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, where an authenticated user can force the server to make arbitrary requests to internal and external resources...
PT-2024-37650 · Playsms · Playsms
Name of the Vulnerable Software and Affected Versions: playSMS version 1.4.3 Description: A vulnerability was found in the Template Handler component, specifically in the file /index.php?app=main&inc=feature firewall&op=firewall list. The manipulation of the id argument leads to injection. The...
AZL-43018 CVE-2024-29038 affecting package tpm2-tools for versions less than 4.3.2-2
tpm2-tools is the source repository for the Trusted Platform Module TPM2.0 tools. A malicious attacker can generate arbitrary quote data which is not detected by tpm2 checkquote. This issue was patched in version 5.7...
LG SuperSign CMS Cross-Site Scripting Vulnerability
LG SuperSign CMS is a content management software solution optimized for LG webOS kanbanban from Luckin LG Korea. A cross-site scripting vulnerability exists in LG SuperSign CMS versions 4.1.3 through 4.3.1, which stems from improper input neutralization during web page generation, resulting in...
iRODS Security Vulnerabilities
iRODS is an open source data management software from iRODS Open Source. A security vulnerability exists in iRODS versions prior to 4.3.2, which stems from the fact that irodsServerMonPerf attempts to use a path that is not a directory...
iRODS Security Vulnerabilities
iRODS is an open source data management software from iRODS Open Source. A security vulnerability exists in iRODS versions prior to 4.3.2, which stems from a questionable dependency of the msiSendMail function on the mail binary...
PT-2024-5494 · Admidio · Admidio
Name of the Vulnerable Software and Affected Versions: Admidio versions prior to 4.3.9 Description: The issue is related to an SQL Injection in the /adm program/modules/ecards/ecard send.php source file of the Admidio Application. This SQL Injection results in a compromise of the application's...
CVE-2024-1161
The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Custom Attributes for blocks in all versions up to, and including, 2.4.43 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with...
Moodle Security Breach
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle versions 4.3 through 4.3.3, which stems from an insufficient check to see if ReCAPTCHA is...
WordPress WP STAGING plugin <= 3.4.3 - Authenticated (Admin+) Arbitrary File Upload vulnerability
Authenticated Admin+ Arbitrary File Upload vulnerability discovered by haidv35 in WordPress Plugin WP STAGING – Backup Duplicator & Migration versions = 3.4.3...
pcp: exposure of the redis server backend allows remote command execution via pmproxy
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...
AZL-40550 CVE-2024-32607 affecting package hdf5 for versions less than 1.14.4.3-1
HDF5 Library through 1.14.3 has a SEGV in H5Aclose in H5Aint.c, resulting in the corruption of the instruction pointer...