PT-2024-22700 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.4 Description: The issue allows a local attacker to execute arbitrary code in any apps through improper input. Recommendations: For versions prior to 3.2.4, update to a version newer than 3.2.4 to resolve the...

CVE-2024-20040

CVE-2024-20040 affects MediaTek WLAN firmware (MT6XXX/MT79XX) and stems from an out-of-bounds write caused by improper input validation. This could enable remote escalation of privilege with no additional execution privileges required and no user interaction. The CVSSv3.1 base score is 8.8 (HIGH)...

PUB-A-318345662

In lpmreqhandler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-305926929

In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PUB-A-315315914

In tmugetpi of tmu.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from an improper input validation issue in the wlan firmware that could result in an out-of-bounds write...

CVE-2024-30530

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.1...

PT-2024-23477 · Unknown · Underconstruction

Name of the Vulnerable Software and Affected Versions: underConstruction versions n/a through 1.21 Description: The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting. This allows for stored XSS attacks. Recommendations: For version...

PT-2024-23791 · Unknown · User Rights Access Manager

Name of the Vulnerable Software and Affected Versions: User Rights Access Manager versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations...

PT-2024-23792 · Webdorado · Webdorado Spiderfaq

Name of the Vulnerable Software and Affected Versions: WebDorado SpiderFAQ versions 1.3.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. This allows for Reflected XSS attacks...

Exploit for Improper Input Validation in Kubernetes Ingress-Nginx

CVE-2023-5044 Poc for CVE 2023 5044 Prerequisites Kind: v0...

PT-2024-23371 · Unknown · Testimonial Slider

Name of the Vulnerable Software and Affected Versions: GS Testimonial Slider versions 3.1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2024-23370 · Unknown · Bold Page Builder

Name of the Vulnerable Software and Affected Versions: Bold Page Builder versions through 4.8.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

Egehan Security WebPDKS SQL注入漏洞

Egehan Security WebPDKS is an application from Egehan Security. Egehan Security WebPDKS suffers from a SQL injection vulnerability that stems from improper neutralization of the particular element used...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Docker Registry, OpenSSH and go-git

Summary go-git and DockerRegistry are consumed through OSE packages. OSE package is shipped with IBM MQ Operator and IBM supplied MQ Advanced container images. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2017-11468 DESCRIPTION: Docker...

VulnCheck KEV: CVE-2024-30503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster.This issue affects Mailster: from n/a through = 4.0.6...

WordPress Plugin Wordpress Tooltips SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

NEC Aterm 安全漏洞

NEC Aterm is a series of wireless routers from Japan Electric NEC. A security vulnerability exists in NEC Aterm that stems from improper neutralization of specific elements used. The following products are affected: WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP,...

CVE-2024-20278

CVE-2024-20278 is a Cisco IOS XE NETCONF vulnerability. The issue arises from improper validation of user-supplied input in the NETCONF feature, enabling an authenticated, remote attacker to escalate privileges from Administrator to root on an affected device. The documented impact includes privi...

CVE-2024-29805

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShopUp Shipping with Venipak for WooCommerce allows Reflected XSS.This issue affects Shipping with Venipak for WooCommerce: from n/a through 1.19.5...