BELL-CVE-2017-13087 CVE-2017-13087 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2017-9935 CVE-2017-9935 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2023-1175

Bulletin has no description...

BELL-CVE-2018-1000122 CVE-2018-1000122 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2018-18313 CVE-2018-18313 does not affect BellSoft software

Bulletin has no description...

The vulnerability of the `var/lib/maxscale/maxscale.cnf.d` component, which is related to the MariaDB MaxScale proxy server, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the var/lib/maxscale/maxscale.cnf.d component of the MariaDB MaxScale proxy server is related to the lack of data encryption measures. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2023-4342

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy...

The vulnerability of the Omnibox address bar in Google Chrome allows a hacker to execute a type of attack known as “man-in-the-middle” attack.

The vulnerability of the Omnibox address bar in Google Chrome relates to the lack of encryption measures for protected data. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

The configuration interface vulnerability of the Hitron CODA-5310 cable switch allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability of the Hitron CODA-5310 cable gateway configuration interface is related to the absence of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or cause service failures...

CVE-2023-2304

The Favorites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userfavorites' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

PT-2023-22140 · Samsung · Exynos Modem 5123 +3

Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor and Modem versions for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080 Description: An issue was discovered due to improper handling of parameters while binding a network interface, which can cause...

BELL-CVE-2023-2235 CVE-2023-2235 does not affect BellSoft software

Bulletin has no description...

The vulnerability of the SAP Diagnostic Agent lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise confidentiality, integrity, and accessibility of data.

The vulnerability of the SAP Diagnostic Agent relates to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise confidentiality, integrity, and accessibility...

SAP Diagnostics Agent 访问控制错误漏洞

SAP Diagnostics Agent is a system diagnostics agent program from SAP, Germany. An access control error vulnerability exists in SAP Diagnostics Agent version 720, which stems from a lack of authentication and insufficient input validation...

The vulnerability of the Python Redis library, redis-py, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Python Redis library, redis-py, is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2023-12849 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as its nature or potential impact. There is no mention of estimated...

WordPress plugin Easy Digital Downloads 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogging sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

SUSE CVE-2020-12244

An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation...

PT-2023-14972 · Unknown · Squirrel.Windows

Name of the Vulnerable Software and Affected Versions: Squirrel.Windows affected versions not specified Description: The issue concerns a DLL hijacking problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue...

The vulnerability of the USB Serial Driver driver for the Windows operating system allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the USB Serial Driver driver for the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information...