PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, SMS alerts and product image scaling. A SQL injection vulnerability exists in PrestaShop flashsales 1.9.7 and earlier versions, which originates from allowing an...

CVE-2023-31889

CVE-2023-31889 affects ASUS RT-AC51U with firmware versions up to 3.0.0.4.380.8591. The issue is an HTTPD service vulnerability allowing local attackers to cause a denial of service via a crafted GET request. Connected sources confirm the affected product and impact as described; there is no deta...

CVE-2023-31889

An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a denial of service via crafted GET request...

ASUS RT-AC51U 安全漏洞

The ASUS RT-AC51U is a wireless router from Asus China. A security vulnerability exists in ASUS RT-AC51U 3.0.0.4.380.8591 and earlier versions, which originates from a vulnerability that allows a local attacker to cause a denial of service via a crafted GET request...

CVE-2023-31889

An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a denial of service via crafted GET request...

DEBIAN-CVE-2022-48638

In the Linux kernel, the following vulnerability has been resolved: cgroup: cgroupgetfromid must check the looked-up kn is a directory cgroup has to be one kernfs dir, otherwise kernel panic is caused, especially cgroup id is provide from userspace...

VulnCheck KEV: CVE-2024-28734

Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted GET request using the cols parameter...

CVE-2024-31551

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request...

CVE-2024-3052 Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability

Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway...

CVE-2024-3052 Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability

Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway...

CVE-2024-32881 Unauthorized access to GET/SET of Slack Bot Tokens in Danswer

Danswer is the AI Assistant connected to company's docs, apps, and people. Danswer is vulnerable to unauthorized access to GET/SET of Slack Bot Tokens. Anyone with network access can steal slack bot tokens and set them. This implies full compromise of the customer's slack bot, leading to internal...

CVE-2024-32881 Unauthorized access to GET/SET of Slack Bot Tokens in Danswer

Danswer is the AI Assistant connected to company's docs, apps, and people. Danswer is vulnerable to unauthorized access to GET/SET of Slack Bot Tokens. Anyone with network access can steal slack bot tokens and set them. This implies full compromise of the customer's slack bot, leading to internal...

PT-2024-23686

Name of the Vulnerable Software and Affected Versions langchain-ai/langchain version 0.1.5 Description A Server-Side Request Forgery SSRF vulnerability exists in the Web Research Retriever component. The vulnerability arises because the Web Research Retriever does not restrict requests to remote...

PT-2024-23447 · Silabs.Com +1 · Z/Ip Gateway Sdk

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves sending malformed S2 Nonce Get command classes to crash the gateway, requiring a hard reset for recovery. No information is provided...

CVE-2024-31551

CVE-2024-31551 : A directory traversal in cmseasy v7.7.7.9 20240105 (lib/admin/image.admin.php) allows attackers to delete arbitrary files via a crafted GET request. Affected product: Cmseasy. CVSS v3.1 base score 7.5 (Network, Privileges: None, User interaction: None, Confidentiality: None, Inte...

CVE-2024-31551

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request...

SiLabs Z-Wave over IP Gateway 安全漏洞

SiLabs Z-Wave over IP Gateway is a hardware unit that plugs into a Wi-Fi router and is used to add and configure Z-Wave devices as well as create and run "scenarios". A security vulnerability exists in SiLabs Z-Wave over IP Gateway v7.13.13 and earlier versions that exploits a vulnerability that...

PT-2024-9916 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the pm runtime get sync function in the mtk-cmdq component of the Linux kernel. The problem arises from the lack of return value checking of this function. When...

SUSE CVE-2024-26926

In the Linux kernel, the following vulnerability has been resolved: binder: check offset alignment in bindergetobject Commit 6d98eb95b450 "binder: avoid potential data leakage when copying txn" introduced changes to how binder objects are copied. In doing so, it unintentionally removed an offset...

DEBIAN-CVE-2024-26926

In the Linux kernel, the following vulnerability has been resolved: binder: check offset alignment in bindergetobject Commit 6d98eb95b450 "binder: avoid potential data leakage when copying txn" introduced changes to how binder objects are copied. In doing so, it unintentionally removed an offset...