N.V.K.INTER iBSG 信任管理问题漏洞

N.V.K.INTER iBSG NVK iBSG is a security appliance from N.V.K.INTER, Inc. A security vulnerability exists in N.V.K.INTER iBSG version v3.5, which stems from the presence of a hard-coded root password that allows an attacker to log in with root privileges via SSH service...

CVE-2023-28690

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marco Steinbrecher WP BrowserUpdate plugin = 4.5 versions...

PT-2023-21907 · Marco Steinbrecher · Wp Browserupdate

Name of the Vulnerable Software and Affected Versions: Marco Steinbrecher WP BrowserUpdate plugin versions = 4.5 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts int...

PT-2023-27371 · Gnu +2 · Gnu Inetutils +2

Name of the Vulnerable Software and Affected Versions: GNU inetutils versions prior to 2.5 Description: The issue allows privilege escalation due to unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is relevant if the setuid system call fails when ...

CVE-2023-24391

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Spider Teams ApplyOnline plugin = 2.5 versions...

CVE-2023-27373

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM...

WordPress plugin Custom Field Template cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2023-9812 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue is related to a denial of service vulnerability that can be exploited with a specially crafted query, allowing a remote...

Zkteco BioTime Path Traversal Vulnerability

ZKTeco BioTime is a powerful web-based time and attendance management software from the Chinese company ZKTeco. A path traversal vulnerability exists in ZKTeco BioTime version v8.5.5, which originates from a vulnerability that allows an unauthenticated attacker to read arbitrary files by providin...

CVE-2023-37647

SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /AntSuxin.php...

Apple macOS Ventura 缓冲区错误漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.5, which originates from an application that may be able to execute arbitrary code using kernel privileges...

CVE-2023-37976

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Radio Forge Muses Player with Skins plugin = 2.5 versions...

PaddlePaddle 代码问题漏洞

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle version 2.5.0 before there is a security vulnerability , the vulnerability stems from the PaddlePaddle paddle.flip function in the existence of a null pointer dereference Null pointer...

PT-2023-26543 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue is a null pointer dereference in the paddle.flip function, which results in a runtime crash and denial of service. Recommendations: For versions prior to 2.5.0, update to version 2.5...

PaddlePaddle 资源管理错误漏洞

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. A security vulnerability exists in PaddlePaddle versions prior to 2.5.0, which stems from a Use after free vulnerability. An attacker could use this vulnerability to perform unauthorized operations or...

CVE-2023-34798

An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-34798

An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file...

Weaver E-Office 代码问题漏洞

Weaver E-Office is a collaborative office system from China's Panavision Technologies Weaver. A security vulnerability exists in weaver e-office versions prior to v9.5. The vulnerability stems from the presence of an arbitrary file upload vulnerability, which allows an attacker to execute arbitra...

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura versions prior to 13.5. An attacker can exploit the vulnerability to execute arbitrary code with kernel privileges...

PT-2023-4118 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Ventura versions prior to 13.5 Description: The issue is related to a buffer overflow in memory, which may allow an attacker to execute arbitrary code with kernel privileges. The...