CVE-2023-32171

CVE-2023-32171 affects Unified Automation UaGateway OPC UA Server. The vulnerability occurs in the ImportCsv method where a crafted XML payload can trigger a null pointer dereference, enabling a remote denial-of-service condition. Exploitation requires authentication and is described in ZDI-20495...

LG Simple Editor 安全漏洞

LG Simple Editor is a simple editor from Luckin LG Korea. Create new content by simplifying the process and instant playback on signage. A security vulnerability exists in LG Simple Editor that stems from an authentication bypass vulnerability in the checkServer method...

VIPRE Antivirus 安全漏洞

VIPRE Antivirus is a security software from VIPRE USA that provides all the features needed to protect PCs from virus infections and other security threats. A security vulnerability exists in VIPRE Antivirus that stems from a specific flaw in the SetPrivateConfig method that allows a local attack...

Inductive Automation Ignition 安全漏洞

Inductive Automation Ignition is an integrated software platform for SCADA systems from Inductive Automation, USA. The platform supports SCADA Data Acquisition and Monitoring Systems, HMI Human Machine Interface and more. A security vulnerability exists in Inductive Automation Ignition due to a...

VIPRE Antivirus 安全漏洞

VIPRE Antivirus is a security software from VIPRE, Inc. that provides all the features needed to protect PCs from virus infections and other security threats. A security vulnerability exists in VIPRE Antivirus that originates from a specific flaw in the DeleteHistoryFile method that allows a loca...

Voltronic Power ViewPower 安全漏洞

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower, which stems from a specific flaw in the shutdown method, and can be exploited by an attacker to execute code in the...

LG Simple Editor 安全漏洞

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from a directory traversal arbitrary file deletion vulnerability that can be exploited by an attacker to send a crafted request to...

Unified Automation UaGateway 安全漏洞

Unified Automation UaGateway is a high performance wrapper/proxy from Unified Automation programmed in C++. A security vulnerability exists in Unified Automation UaGateway that stems from a specific flaw in the implementation of the AddServer method that allows an attacker to create a denial of...

VIPRE Antivirus 安全漏洞

VIPRE Antivirus is a security software from VIPRE USA that provides all the features needed to protect PCs from virus infections and other security threats. A security vulnerability exists in VIPRE Antivirus that stems from a specific flaw in the FPQuarTransfer method that allows a local attacker...

Unified Automation UaGateway 安全漏洞

Unified Automation UaGateway is a high-performance wrapper/agent from Unified Automation programmed in C++. A security vulnerability exists in Unified Automation UaGateway that stems from a specific flaw in the ImportCsv method that allows an attacker to create a denial of service condition...

On Prem || 2203 LTSR || VDA hangs or freezes while launching skype business applications.

2203 VDA hangs or freezes while launching skype business applications. Inside the published VDA Users open Skype for business and they noticed Randomly that VDA is Frozen This is only see with Skype for business If the users close the session and connect back to session by clicking the icon in...

UBUNTU-CVE-2024-27036

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix writeback data corruption cifs writeback doesn't correctly handle the case where cifsextendwriteback hits a point where it is considering an additional folio, but this would overrun the wsize - at which point it drops o...

CVE-2024-33832

OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery SSRF via the component /index.php?c=api&method=getlinkinfo...

USN-6758-1: JSON5 vulnerability

It was discovered that the JSON5 parse method incorrectly handled the parsing of keys named \proto\. An attacker could possibly use this issue to pollute the prototype of the returned object, setting arbitrary or unexpected keys, and cause a denial of service, allow unintended access to network...

urllib3: Request body not stripped after redirect from 303 status changes request method to GET

A flaw was found in urllib3, an HTTP client library for Python. urllib3 doesn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303, after changing the method in a request from one that could accept a request body such as POST to GET, as is required by HTTP...

CVE-2024-31820

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component...

CVE-2024-31822

An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component...

PT-2024-25180 · Prestaddons · Prestaddons Flashsales

Name of the Vulnerable Software and Affected Versions: Prestaddons flashsales versions 1.9.7 and earlier Description: The issue allows an attacker to run arbitrary SQL commands via the FsModel::getFlashSales method, potentially leading to unauthorized data access or modification. Recommendations:...

CVE-2024-31820

An issue in Ecommerce-CodeIgniter-Bootstrap (Languages.php, getLangFolderForEdit) allows remote code execution via a crafted call to the getLangFolderForEdit method. The CVE-2024-31820 entry notes the vulnerability; Red Hat and OSV/CNNVD variants corroborate the same description. No affected vers...

Ecommerce-CodeIgniter-Bootstrap 安全漏洞

Ecommerce-CodeIgniter-Bootstrap is a responsive, multi-vendor, multi-language online store platform shopping cart solution. A security vulnerability exists in Ecommerce-CodeIgniter-Bootstrap, which stems from an arbitrary code execution vulnerability in the saveLanguageFiles method of the...