5061 matches found
The vulnerability in the web interface of the microprogramming software for Cisco IP Phones 6800, 7800, 8800, and 8875 allows a perpetrator to cause a service failure.
The vulnerability of the web-based management interface for Cisco IP Phones 6800, 7800, 8800, and 8875 lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending specially crafted...
CVE-2024-34532: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in Yvan Dotet PostgreSQL Query Deluxe module aka querydeluxe 17.x before 17.0.0.4 allows a remote attacker to gain privileges via the query parameter to models/querydeluxe.py:QueryDeluxe::getresultfromquery...
MAI-2024-0056
This vulnerability pertains to multimodal large language models MLLMs, where attackers can efficiently perform jailbreaking attacks by utilizing visual inputs to circumvent established safety protocols. The attack methodology involves integrating a visual module into the target LLM, followed by...
CVE-2024-24313
An issue in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/FormModel.php and QRModel.php component...
CVE-2024-24312
A SQL injection vulnerability exists in Vaales Technologies V_QRS version v.2024-01-17 . This flaw allows a remote attacker to obtain sensitive information by targeting the Models/UserModel.php component. As a temporary workaround, it is recommended to restrict access to this specific component a...
CVE-2024-24313
Vaales Technologies V_QRS v.2024-01-17 is affected by a vulnerability that allows a remote attacker to obtain sensitive information . The issue originates from the Models/FormModel.php and QRModel.php components. To mitigate this risk, it is recommended to restrict access to these specific compon...
CVE-2024-24313: Exposure of Sensitive Information to an Unauthorized Actor
An issue in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/FormModel.php and QRModel.php component...
CVE-2024-24312: Authorization Bypass Through User-Controlled Key
SQL injection vulnerability in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/UserModel.php component...
CVE-2024-24313
An issue in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/FormModel.php and QRModel.php component...
CVE-2024-24313
An issue in Vaales Technologies VQRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/FormModel.php and QRModel.php component...
CVE-2023-46304: Improper Neutralization of Special Elements in Output Used by a Downstream Component
modules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a remote authenticated attacker to run arbitrary PHP code because an unprotected endpoint allows them to write this code to the config.inc.php file executed on every page load...
Getting Started with LLMs: Managing Data Collection
...
Keenetic KN-1010 安全漏洞
Keenetic KN is a series of routers from Keenetic. A security vulnerability exists in Keenetic KN-1010, which originates from an information disclosure vulnerability in file /ndmComponents.js. Affected products and versions: Keenetic KN-1010, KN-1410, KN-1711, KN-1810, and KN-1910 4.1.2.15 and...
Keenetic KN-1010 信息泄露漏洞
Keenetic KN is a series of routers from Keenetic. An information disclosure vulnerability exists in Keenetic KN-1010, which stems from an information disclosure vulnerability in file/version.js. Affected products and versions: Keenetic KN-1010, KN-1410, KN-1711, KN-1810, and KN-1910 4.1.2.15 and...
Unitronics Vision series PLCs 安全漏洞
Unitronics Vision series PLCs are a series of PLCs from Unitronics, Inc. A security vulnerability exists in Unitronics Vision series PLCs that originates from a vulnerability that allows an attacker to retrieve message mode passwords without authentication. Affected products and versions:...
Authorization Bypass
github.com/openfga/openfga is vulnerable to Authorization Bypass. The vulnerability is due to improper handling of exclusion or intersection models, leading to potential bypass when calling certain APIs...
PT-2024-24086
Name of the Vulnerable Software and Affected Versions OpenFGA versions 1.5.0 through 1.5.2 Description The issue concerns an authorization bypass when calling Check or ListObjects APIs in OpenFGA. Users are likely affected if their model involves exclusion e.g., a but not b or intersection e.g., ...
编号撤回
Lunary is a production toolkit for LLMs from lunary open source. This CVE number has been withdrawn...
PT-2024-3234 · Keenetic · Keenetic Kn-1810 +4
Name of the Vulnerable Software and Affected Versions: Keenetic KN-1010, KN-1410, KN-1711, KN-1810, and KN-1910 versions up to 4.1.2.15 Description: A vulnerability was found in the Version Data Handler component, specifically in the /version.js file, which leads to information disclosure. The...