Prestashop Path Traversal Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The program provides a variety of payment methods, short message alerts and product image zoom and other features. Prestashop plugin M4 PDF 3.2.3 and previous versions of a security vulnerability , the...

Prestashop plugin M4 PDF cross-site scripting vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A security vulnerability exists in Prestashop plugin M4 PDF 3.2.3 and earlier version...

CVE-2023-40193

Deco M4 firmware versions prior to 'Deco M4JPV21.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-40193

Deco M4 firmware versions prior to 'Deco M4JPV21.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

Design/Logic Flaw

Deco M4 firmware versions prior to 'Deco M4JPV21.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-40193

Deco M4 firmware versions prior to 'Deco M4JPV21.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-40193

Deco M4 firmware versions prior to 'Deco M4JPV21.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

CVE-2023-40193

The CVE-2023-40193 entry concerns TP-LINK Deco M4 firmware. Affected: Deco M4 (JP) firmware prior to V2_1.5.8 Build 20230619. Impact: a network-adjacent authenticated attacker can execute arbitrary OS commands via the device, as described by the referenced sources. The vulnerability stems from im...

TP-LINK Deco M4 OS Command Injection Vulnerability

The TP-LINK Deco M4 is a wireless router from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK Deco M4 V21.5.8 Build 20230619, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating system commands...

Atlassian Confluence 7.13.15 < 7.13.19 / 7.19.7 < 7.19.11 / 8.1.1 < 8.4.1 DoS (CONFSERVER-90185)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-90185 advisory. - The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If...

CVE-2023-37216

AnaSystem SensMini M4 – Using the configuration tool, an authenticated user can cause Denial of Service for the device...

Design/Logic Flaw

AnaSystem SensMini M4 – Using the configuration tool, an authenticated user can cause Denial of Service for the device...

CVE-2023-37216

The CVE-2023-37216 case concerns AnaSystem SensMini M4. The vulnerability is described as: an authenticated user can cause a Denial of Service on the device by using the configuration tool. Affected software is the SensMini M4; the exact vulnerable component is the configuration tool, with impact...

CVE-2023-37216 AnaSystem SensMini M4 – an authenticated user can cause Denial of Service

AnaSystem SensMini M4 – Using the configuration tool, an authenticated user can cause Denial of Service for the device...

AnaSystem SensMini M4 安全漏洞

The AnaSystem SensMini M4 is a Smart Transmission Recorder from China's AnaSystem Technologies AnaSystem. A security vulnerability exists in the AnaSystem SensMini M4 that originates from allowing an authenticated attacker to cause a denial of service DoS...

PT-2023-25834 · Anasystem · Anasystem Sensmini M4

Name of the Vulnerable Software and Affected Versions: AnaSystem SensMini M4 affected versions not specified Description: The issue allows an authenticated user to cause a Denial of Service for the device using the configuration tool. Recommendations: At the moment, there is no information about ...

PT-2023-5450 · Tp Link · Deco M4

Name of the Vulnerable Software and Affected Versions: Deco M4 firmware versions prior to 'Deco M4JP V2 1.5.8 Build 20230619' Description: The issue allows a network-adjacent authenticated attacker to execute arbitrary OS commands. This is related to the failure to neutralize special elements in...

Apache Tomcat DoS Vulnerability (May 2023) - Linux

Apache Tomcat is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat"; ...

CVE-2023-2259 Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304...

Experts Discover Flaw in U.S. Govt's Chosen Quantum-Resistant Encryption Algorithm

A group of researchers has revealed what it says is a vulnerability in a specific implementation of CRYSTALS-Kyber, one of the encryption algorithms chosen by the U.S. government as quantum-resistant last year. The exploit relates to "side-channel attacks on up to the fifth-order masked...