6592 matches found
PT-2023-31588 · Pluck Cms · Pluck Cms
Name of the Vulnerable Software and Affected Versions: Pluck-CMS version 4.7.18 Description: The issue is related to an arbitrary file upload vulnerability in the /inc/modules install.php component. This vulnerability allows attackers to execute arbitrary code by uploading a crafted ZIP file...
Pluck 安全漏洞
Pluck is a content management system CMS developed using the PHP language. An arbitrary file upload vulnerability exists in Pluck version v4.7.18, which stems from the lack of valid validation of uploaded files in component /inc/modulesinstall.php. An attacker can exploit this vulnerability to...
CVE-2023-49587
SAP Solution Manager - version 720, allows an authorized attacker to execute certain deprecated function modules which can read or modify data of same or other component without user interaction over the network...
CVE-2023-49587 Command Injection vulnerability in SAP Solution Manager
SAP Solution Manager - version 720, allows an authorized attacker to execute certain deprecated function modules which can read or modify data of same or other component without user interaction over the network...
The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.
The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...
The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.
The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...
The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.
The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...
The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.
The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...
Vulnerability of modules for supporting and implementing ICMP, TCP, SNMP, DHCP, NAT, and FTP network stack in Azure RTOS NetX Duo, allowing a hacker to execute arbitrary code or cause service failure.
Vulnerability of modules for supporting and implementing ICMP, TCP, SNMP, DHCP, NAT, and FTP network stack in Azure RTOS NetX Duo arises due to the operation of writing data beyond the buffer limit in memory, as a result of the pointer being set to an expired one. Exploitation of this vulnerabili...
The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.
The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...
The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.
The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...
CVE-2023-49429
Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules...
SUSE CVE-2023-45285
Using go get to fetch a module with the ".git" suffix may unexpectedly fallback to the insecure "git://" protocol if the module is unavailable via the secure "https://" and "git+ssh://" protocols, even if GOINSECURE is not set for said module. This only affects users who are not using the module...
Tenda AX9 安全漏洞
Tenda AX9 is a Wi-Fi 6 router from Tenda China. A command execution vulnerability exists in Tenda AX9 version V22.03.01.46, which is caused by the "mac" parameter in /goform/setModules not properly filtering constructed command special characters, commands, etc. This vulnerability can be exploite...
Huawei HarmonyOS Multi-User Module Authorization Issue Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an authorization issue vulnerability that stems from improper privilege management in multi-user modules. An attacker could...
com.qwlabs.doraemon:feature-flags (>=0.2.257 <=0.2.290), com.qwlabs.doraemon:graphql (>=0.2.282 <=0.2.290) +10 more potentially affected by CVE-2023-6393 via io.quarkus:quarkus-cache (>=3.3.0.CR1 <=3.5.1)
io.quarkus:quarkus-cache MAVEN version =3.3.0.CR1, =0.2.257, =0.2.282, =0.2.281, =0.2.282, =0.2.257, =0.2.257, =0.2.257, =3.3.0.CR1, =3.3.0.CR1, =3.3.0.CR1, =3.3.0.CR1, =3.3.0.CR1, =3.5.1 Source cves: CVE-2023-6393 Source advisory: OSV:GHSA-XFV5-JQGP-VQHJ...
com.qwlabs.doraemon:feature-flags (>=0.2.239 <=0.2.256), com.qwlabs.doraemon:q-api (>=0.2.239 <=0.2.256) +8 more potentially affected by CVE-2023-6393 via io.quarkus:quarkus-cache (>=3.2.0.CR1 <=3.2.8.Final)
io.quarkus:quarkus-cache MAVEN version =3.2.0.CR1, =0.2.239, =0.2.239, =0.2.239, =0.2.239, =3.2.0.CR1, =3.2.0.CR1, =3.2.0.CR1, =3.2.0.CR1, =3.2.0.CR1, =2.0.17, =2.1.0-BETA-7 Source cves: CVE-2023-6393 Source advisory: OSV:GHSA-XFV5-JQGP-VQHJ...
DEBIAN-CVE-2023-45285
Using go get to fetch a module with the ".git" suffix may unexpectedly fallback to the insecure "git://" protocol if the module is unavailable via the secure "https://" and "git+ssh://" protocols, even if GOINSECURE is not set for said module. This only affects users who are not using the module...
GO-2023-2383 Command 'go get' may unexpectedly fallback to insecure git in cmd/go
Using go get to fetch a module with the ".git" suffix may unexpectedly fallback to the insecure "git://" protocol if the module is unavailable via the secure "https://" and "git+ssh://" protocols, even if GOINSECURE is not set for said module. This only affects users who are not using the module...
Information Disclosure
microsoft/microsoft-graph is vulnerable to Information Disclosure. The vulnerability exists in the phpinfo function of GetPhpInfo.php, allowing an attacker to access unauthorized system information such as configuration details, modules, and environment variables. This vulnerability is only...