BleachBit Code Issue Vulnerability

BleachBit is a free open source disk space cleaner, privacy manager and computer system optimizer from BleachBit Open Source. A code issue vulnerability exists in BleachBit 4.4.2 and prior versions that stems from the presence of a dynamic link library DLL hijacking vulnerability...

EC-CUBE 3 series and 4 series vulnerable to arbitrary code execution

Overview EC-CUBE 3 series and 4 series provided by EC-CUBE CO.,LTD. contain an arbitrary code execution vulnerability CWE-94 due to improper settings of the product's template engine "Twig". Takeshi Miura of N.F.Laboratories Inc. reported this vulnerability to EC-CUBE CO.,LTD. EC-CUBE CO.,LTD. In...

CVE-2023-46981

SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /common/log/list...

CVE-2023-46947

Subrion 4.2.1 has a remote command execution vulnerability in the backend...

CVE-2023-45899

An issue in the component SuperUserSetuserModuleFrontController:init of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call...

CVE-2023-45899

An issue in the component SuperUserSetuserModuleFrontController:init of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call...

PT-2023-29203 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.2 through 7.4.3.53 Liferay DXP 7.4 before update 54 Description: The issue concerns multiple stored cross-site scripting XSS vulnerabilities in the fragment components. These vulnerabilities allow remote attackers ...

CVE-2023-43884

A Cross-site scripting XSS vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Reference ID' parameter...

Docker Desktop Security Vulnerabilities

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

PT-2023-28755 · Phpjabbers · Phpjabbers Php Shopping Cart

Name of the Vulnerable Software and Affected Versions: Phpjabbers PHP Shopping Cart version 4.2 Description: The issue is related to SQL Injection via the id parameter. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices...

DEBIAN-CVE-2020-24165

An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service DoS. Note: This is disputed as a bug and not a valid security issue by multiple third parties...

SUSE CVE-2022-28069

A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...

SUSE CVE-2022-28070

A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...

CVE-2023-4475

An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master ADM allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below...

CVE-2022-28073

A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...

UBUNTU-CVE-2022-28070

A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...

radare2 缓冲区错误漏洞

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a heap buffer overflow in the vaxopfunction method...

radare2 资源管理错误漏洞

radare2 is a set of libraries and tools for working with binaries. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a post-release reuse issue in the rregsetvalue method...

Intel(R) SSD Security Vulnerability

IntelR SSD is a solid state drive from Intel Corporation USA. A security vulnerability exists in versions prior to IntelR SSD Tools mdadm-4.2-rc2. An attacker can exploit the vulnerability to elevate privileges...

Intel Unite Code Issue Vulnerability

Intel Unite is an enterprise meeting collaboration solution from Intel Corporation USA. A security vulnerability exists in Intel Unite versions prior to 4.2.11. An attacker could exploit the vulnerability to elevate privileges...