4453 matches found
SolarWinds Network Performance Monitor SqlFileScript Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the SqlFileScript function. The issue results from the lack of proper...
Siemens Solid Edge Viewer STP File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-0991
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
PT-2023-10388 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number from the National Vulnerability...
PT-2023-14374
Name of the Vulnerable Software and Affected Versions Intuitive Custom Post Order WordPress plugin versions prior to 3.1.4 Description The issue allows any logged-in user, with roles as low as Subscriber, to update the menu order due to a lack of authorization check in the update-menu-order ajax...
SICK FX0-GPNT 访问控制错误漏洞
The SICK FX0-GPNT00000 is a safety control module from SICK with a built-in Ethernet switch. A security vulnerability exists in the SICK FX0-GPNT v3 Firmware version V3.04, V3.05, which stems from a lack of authentication for critical functions. The vulnerability can be exploited by an attacker t...
Moodle 3.11.x < 3.11.12 Multiple Vulnerabilities
The version of Moodle installed on the remote host is 3.9.x prior to 3.9.19, 3.11.x prior to 3.11.12, 4.0.x prior to 4.0.6 or 4.1.x prior to 4.1.1. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability due to the lack of sanitization of some returnurl...
Moodle 3.9.x < 3.9.19 Multiple Vulnerabilities
The version of Moodle installed on the remote host is 3.9.x prior to 3.9.19, 3.11.x prior to 3.11.12, 4.0.x prior to 4.0.6 or 4.1.x prior to 4.1.1. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability due to the lack of sanitization of some returnurl...
Online Pizza Ordering System 访问控制错误漏洞
Online Pizza Ordering System is an online pizza ordering system by Carlo Montero Personal Developer. An access control error vulnerability exists in Online Pizza Ordering System version 1.0, which stems from a lack of authentication...
LS ELECTRIC XBC-DN32U 访问控制错误漏洞
The LS ELECTRIC XBC-DN32U is a PLC programmable logic controller from LS ELECTRIC in Korea. An Access Control Error vulnerability exists in the LS ELECTRIC XBC-DN32U version 01.80, which stems from a lack of authentication for the PLC to perform critical functions and can be exploited by an...
Kiwi TCMS 安全漏洞
Kiwi TCMS is a leading open source test management system for manual and automated testing from Kiwi TCMS Open Source. A security vulnerability exists in Kiwi TCMS versions prior to 12.0, which stems from the fact that the system is not rate-limited, which makes brute-force attacks on the login...
Stored XSS in Email Blacklist Function
Description Stored attacks are those where the injected script is permanently stored on the target servers, such as in a database, in a message forum, visitor log, comment field, etc. The victim then retrieves the malicious script from the server when it requests the stored information. Stored XS...
PT-2023-35285
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.231 Description A potential security issue exists due to the lack of a return value check for the create hist field function in the trace events hist module. The actual impact and attack plausibility have no...
PT-2023-35327
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.272 Description A potential security issue exists due to the lack of a return value check for the create hist field function in the trace events hist module. The actual impact and attack plausibility have n...
PT-2023-35140
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.91 Description A potential security issue exists due to the lack of a return value check for the create hist field function in the trace events hist module. The actual impact and attack plausibility have no...
PT-2023-6915
Name of the Vulnerable Software and Affected Versions PC settings tool versions 10.1.26.0 and earlier PC settings tool versions 11.0.22.0 and earlier Description The issue is related to a lack of authentication for a critical function in the PC Settings Tool. This can be exploited to allow an...
PT-2023-15666
Name of the Vulnerable Software and Affected Versions Bundle management module affected versions not specified Description The issue is related to a lack of authentication and control mechanisms in some APIs within the bundle management module. This could potentially affect data confidentiality i...
PT-2023-15667
Name of the Vulnerable Software and Affected Versions Bundle management module affected versions not specified Description The issue is related to the lack of authentication and control mechanisms in some APIs of the bundle management module. This could potentially affect data confidentiality...
Open Design Alliance (ODA) Drawing SDK DGN File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawing SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
