CVE-2024-12645

CVE-2024-12645 affects Chunghwa Telecom topm-client. One API is vulnerable to Relative Path Traversal and the suite also lacks CSRF protection, enabling phishing-based unauthenticated access to read arbitrary files on the user’s system. Per CNNVD, affected topm-client versions are 0.3.14 through ...

CGA-VVGR-WWX8-2F82

Bulletin has no description...

CGA-FFCQ-FG4H-8PWW

Bulletin has no description...

CGA-V4P7-QG79-M8C2

Bulletin has no description...

CGA-JC2G-82H2-4X7R

Bulletin has no description...

CGA-RV7R-V22V-8RFF

Bulletin has no description...

CGA-8GXQ-MPRG-5HJ5

Bulletin has no description...

CGA-P9W2-QPF7-F95M

Bulletin has no description...

CGA-M9RG-WPWQ-V8Q7

Bulletin has no description...

CGA-F244-X97J-93MQ

Bulletin has no description...

CGA-CC5G-7VH9-FJHV

Bulletin has no description...

CVE-2024-12212

The vulnerability occurs in the parsing of CSP files. The issues result from the lack of proper validation of user-supplied data, which could allow reading past the end of allocated data structures, resulting in execution of arbitrary code...

CGA-F5R9-VHHM-6W7R

Bulletin has no description...

CGA-27MQ-C8JC-H222

Bulletin has no description...

CGA-4W2H-CH3P-539H

Bulletin has no description...

Insecure Configuration Injection

flowise is vulnerable to insecure configuration injection. The vulnerability is due to insufficient protection and lack of secure default settings for the overrideConfig option, which allows developers to inject configuration into the Chainflow during execution...

ORing IAP-420 安全漏洞

The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions, which stems from a lack of input validation in the web interface...

PT-2024-9431 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Description: The issue is related to a remote code execution problem in Windows Remote Desktop Services. It involves the use of memory after it has been freed, which can be...

WordPress plugin 360 Javascript Viewer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress plugin ARForms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...