20178 matches found
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores relates to the possibility of manipulating cross-site requests. This allows attackers to bypass security restrictions and carry out CSRF attacks.
The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and perform CSRF attacks...
VICIdial 2.14-917a SQL Injection Vulnerability
An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial version 2.14-917a to enumerate database records. By default, VICIdial stores plaintext credentials within the database. Title: VICIdial Unauthenticated SQL Injection Publication URL:...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce stores relates to deficiencies in access control, allowing attackers to enhance their privileges.
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce stores is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the insufficient protection of sensitive data. This allows attackers to circumvent security restrictions.
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores lies in insufficient restrictions on authentication attempts. This allows attackers to bypass security measures and carry out brute-force attacks.
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and carry out a...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the unlimited loading of dangerous files, allowing attackers to execute arbitrary code.
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of measures taken to neutralize special elements used in the operating system. This allows attackers to execute arbitrary code.
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute...
CVE-2024-45044 Bareos's negative command ACLs can be circumvented by abbreviating commands
Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation i.e. "w" for "whoami" the ACL check did not apply to the full form i.e. "whoami" but to the abbreviated...
CVE-2024-40754
Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0...
[SECURITY] Fedora 39 Update: firefox-130.0-3.fc39
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
编号撤回
Nix is a powerful package manager from the Nix open source. It is used for making packages. This CVE number has been withdrawn...
Computer Vision Annotation Tool 安全漏洞
Computer Vision Annotation Tool CVAT is a cvat.ai open source interactive video and image annotation tool for computer vision. A security vulnerability exists in Computer Vision Annotation Tool CVAT versions prior to 2.18.0 that originates from an attacker with a CVAT account having access to any...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from the American company Google. Google Android has a security vulnerability that stems from improper validation of input...
Sunshine 安全漏洞
Sunshine is a self-service game streaming host for Moonlight open-sourced by LizardByte. Sunshine suffers from a security vulnerability that stems from the possibility that a client that suffers a MITM attack during the pairing process may inadvertently allow access to unintended clients...
PT-2024-29028 · Samsung · Escargot
Name of the Vulnerable Software and Affected Versions: Escargot version 4.0.0 Description: The issue is a Heap-based Buffer Overflow vulnerability in the Samsung Open Source Escargot JavaScript engine, which allows overflow buffers to occur. This can potentially lead to security issues...
CVE-2024-40643
Summary: CVE-2024-40643 affects Joplin via a parsing error that fails to properly handle “
USN-6995-1: Thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing,...
The vulnerability of the OTRS request processing system arises from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.
The vulnerability of the OTRS request processing system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
Payroll Management System SQL注入漏洞
Payroll Management System is itsourcecode open source payroll management system. Payroll Management System version 1.0 exists SQL injection vulnerability , the vulnerability stems from the file /ajax.php?action=deletedeductions parameter id will lead to SQL injection...