WordPress plugin Wp-D3 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

TOTOLINK A7100RU 操作系统命令注入漏洞

TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK A7100RU version V7.4cu.2313B20191024, which stems from a command injection vulnerability in that an attacker can obtain a stable root shell via a specially crafted payload...

Shimo VPN 授权问题漏洞

Shimo VPN is a VPN Virtual Private Network software for macOS platform. Mailbutler GmbH Shimo VPN Client for macOS version v5.0.4 suffers from a security vulnerability that stems from a vulnerability in the help tool that allows attackers to bypass authentication via PID reuse...

FRRouting FRR 缓冲区错误漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR version 8.4 and earlier versions, which originates from an out-of-bounds read by the BGP daemon...

WWBN AVideo 操作系统命令注入漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. WWBN AVideo version prior to 12.4 suffers from an operating system command injection vulnerability that stems from the presence of an operating system command injection vulnerability. An attacker can exploit this vulnerabili...

SUSE-SU-2023:2046-1 Security update for openssl-ibmca

This update for openssl-ibmca fixes the following issues: Upgraded openssl-ibmca to version 2.4.0 bsc1210058 - Provider: Adjustments for OpenSSL versions 3.1 and 3.2 - Provider: Support RSA blinding - Provider: Constant-time fixes for RSA PKCS1 v1.5 and OAEP padding - Provider: Support 'implicit...

WWBN AVideo 操作系统命令注入漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo versions prior to 12.4. An attacker can exploit the vulnerability to execute arbitrary code via the video link field to embed video link functionality...

ncurses 缓冲区错误漏洞

ncurses is a character terminal processing library that provides a set of functions for users to call and generate text-based user interfaces. A security vulnerability exists in versions prior to ncurses 6.4 20230408. An attacker could exploit this vulnerability to cause memory corruption...

CVE-2023-22235

InCopy versions 18.1 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

ATEN International PE8108 安全漏洞

The ATEN International PE8108 is an intelligent PDU from China-based ATEN International. A security vulnerability exists in ATEN International PE8108 version 2.4.232, which stems from incorrect access control...

WordPress plugin Simple Giveaways 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2023-26343

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

PT-2023-19009 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: A logic issue was addressed with improved restrictions, allowing photos belonging to the Hidden Photos Album to be viewed without...

PT-2023-21438 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: The issue concerns files downloaded from the internet that may not have the quarantine flag applied. This was addressed with improved...

PT-2023-2360 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A critical issue affects the IMFCameraProtect.sys library in the IOCTL Handler component, leading to a stack-based buffer overflow due to the manipulation of the function...

PT-2023-14715

Name of the Vulnerable Software and Affected Versions ComponentSpace.Saml2 version 4.4.0 Description The issue concerns missing SSL certificate validation at the application layer. According to the vendor, this is not considered a vulnerability because certificates are exchanged between trusted...

MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.169. An attacker exploited...

Fortinet FortiAuthenticator 安全漏洞

Fortinet FortiAuthenticator is a centralized user identity management solution from Fortinet. A security vulnerability exists in Fortinet FortiAuthenticator 6.4.x and prior versions, which stems from an improperly restricted over-authentication attempt vulnerability that can be exploited by an...

IBM QRadar SIEM 信息泄露漏洞

IBM QRadar SIEM is a solution from IBM that leverages security intelligence to protect assets and information from advanced threats. IBM QRadar SIEM versions 7.4 and 7.5 contain an information disclosure vulnerability that originates when a non-tenant user assigned a domain-specific security...

Fortinet FortiNAC 跨站脚本漏洞

Fortinet FortiNAC is a zero-trust access solution from Fortinet. A security vulnerability exists in Fortinet FortiNAC portal UI versions prior to 9.4.1, which stems from improper neutralization of user input. An attacker could exploit this vulnerability to conduct a cross-site scripting attack...