13420 matches found
SUSE CVE-2021-47267
In the Linux kernel, the following vulnerability has been resolved: usb: fix various gadget panics on 10gbps cabling usbassigndescriptors is called with 5 parameters, the last 4 of which are the usbdescriptorheader for: full-speed USB1.1 - 12Mbps including USB1.0 low-speed @ 1.5Mbps, high-speed...
CVE-2024-21791
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability...
CVE-2024-21791
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability...
CVE-2024-21791 SQL Injection in ADAudit Plus
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability...
CVE-2024-21791 SQL Injection in ADAudit Plus
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability...
CVE-2024-21791
CVE-2024-21791 affects Zoho ManageEngine ADAudit Plus versions below 7271, where a SQL injection in the Lock History option is possible. Root cause: input handling in the lockout history path enables SQL injection. Impact stated in sources includes high confidentiality, integrity, and availabilit...
Traversal outside working tree enables arbitrary code execution
Summary During checkout, gitoxide does not verify that paths point to locations in the working tree. A specially crafted repository can, when cloned, place new files anywhere writable by the application. Details Although gix-worktree-state checks for collisions with existing files, it does not...
CVE-2024-3927
The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Form Submission Admin Email Bypass in all versions up to, and including, 5.6.3. This is due to the plugin not properly checking for all variations of an...
CVE-2024-21791: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability...
Zoho ManageEngine ADAudit Plus 安全漏洞
ZOHO ManageEngine ADAudit Plus is used by Zoho USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in Zoho ManageEngine ADAudit Plus prior to version 7271, which stems from a SQL injection issue in the Lock History option...
PT-2024-19059 · Zoho · Zoho Manageengine Adaudit Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions below 7271 Description: The issue allows SQL Injection in the lockout history option. Note that non-admin users cannot exploit this vulnerability. Recommendations: For versions below 7271, update to...
data-integration-babel (>=0.3.0, <=0.5.0), dbfactory (>=1.0.4, <=1.0.10) +9 more potentially affected by CVE-2024-36039 via pymysql (0.10.0)
pymysql PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymysql and may be impacted: - data-integration-babel =0.3.0, =1.0.4, =0.2.0, =2.2.6, =1.0.0, =0.2.2, =0.6.10, =1.42.14, =9.4.219.dev3, =10.0.71 - telegraf-pyplug 0.1.1 Source...
WordPress Carousel Slider plugin < 2.2.11 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Carousel Slider versions 2.2.11...
CVE-2021-47267: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: usb: fix various gadget panics on 10gbps cabling usbassigndescriptors is called with 5 parameters, the last 4 of which are the usbdescriptorheader for: full-speed USB1.1 - 12Mbps including USB1.0 low-speed @ 1.5Mbps, high-speed...
CVE-2023-49335
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details...
CVE-2023-49335
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details...
CVE-2023-49331
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option...
CVE-2023-49332
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares...