PT-2023-23934 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 Description: A logic issue was addressed with improved state management, allowing a user to potentially read information belonging to another user. Recommendations: For versions prior to 13.5, update to macOS...

HGiga iSherlock 操作系统命令注入漏洞

HGiga iSherlock is a series of software products from China's Henderson Technology HGiga. An operating system command injection vulnerability exists in HGiga iSherlock version 4.5, which originates from allowing operating system command injection...

WordPress Plugin Jupiter X Core 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exis...

PT-2023-26234 · Ibos Oa · Ibos Oa

Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue affects the processing of the file ?r=article/category/del in the Delete Category Handler component, leading to sql injection. The attack can be initiated remotely. The issue has been public...

PT-2023-26157 · Activeitzone · Active Super Shop Cms

Name of the Vulnerable Software and Affected Versions: ActiveITzone Active Super Shop CMS version 2.5 Description: A problematic issue has been found in the Manage Details Page component, where the manipulation of the name, phone, or address arguments leads to cross-site scripting. The attack can...

TIBCO Software EBX Add-ons SQL注入漏洞

TIBCO Software EBX Add-ons is an add-on from TIBCO Software, Inc. that enhances the functionality of the Tibco Ebx data management platform. A security vulnerability exists in TIBCO EBX Add-ons versions 4.5.17 and earlier, 5.6.2 and earlier, and 6.1.0, which stems from an easily exploitable...

CVE-2023-35096

Cross-Site Request Forgery CSRF vulnerability in myCred plugin = 2.5 versions...

PT-2023-4084 · Siemens · Simatic Cn 4100

Name of the Vulnerable Software and Affected Versions: SIMATIC CN 4100 versions prior to V2.5 Description: A vulnerability has been identified in the SIMATIC CN 4100, related to an incorrect default value in the SSH configuration. This issue could allow an attacker to bypass network isolation. Th...

CVE-2023-30431

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: 252184...

CVE-2023-23487

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 and 11.5 is vulnerable to insufficient audit logging. IBM X-Force ID: 245918...

PT-2023-5541 · Ibm · Ibm Db2 Connect Server +1

Name of the Vulnerable Software and Affected Versions: IBM DB2 versions 10.5 through 11.5 IBM DB2 Connect Server versions 10.5 through 11.5 Description: The issue is related to insufficient input validation in the IBM DB2 database management system and the IBM DB2 Connect Server, which can be...

DEBIAN-CVE-2023-30207

A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file...

Kodi Home Theater Software 数字错误漏洞

Kodi Home Theater Software is an award-winning free and open source GPL software media player and digital media entertainment center from the individual developer Peter Frühberger. A security vulnerability exists in Kodi Home Theater Software version 19.5 and earlier, which stems from a de-zeroin...

GLPI 安全漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

gnuplot 安全漏洞

gnuplot is an interactive command-line tool that allows users to convert data and data functions into easy-to-see flat or three-dimensional graphics by entering commands. A security vulnerability exists in gnuplot v5.5, which contains a buffer overflow via the plotrequest function...

PT-2023-25119 · Activeitzone · Active It Zone Active Ecommerce Cms

Name of the Vulnerable Software and Affected Versions: Active It Zone Active eCommerce CMS version 6.5.0 Description: A vulnerability was found in the Create Ticket Page component, specifically affecting the file /ecommerce/support ticket. The issue arises from the manipulation of the details...

WordPress Plugin Better Search 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

LibTIFF 安全漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF version 4.5.0, which stems from a buffer overflow vulnerability in /libtiff/tools/tiffcrop.c. The...

LibTIFF 安全漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF version 4.5.0, which stems from a buffer overflow vulnerability in the uvencode function...

CVE-2023-26274

IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248144...