phiola 安全漏洞

phiola is a fast audio player, recorder, and converter for Windows, Linux, and Android by Simon Zolin Personal Developer. A security vulnerability exists in phiola version v2.0-rc22, which stems from the presence of a buffer overflow vulnerability that could allow a remote attacker to execute...

Laboratory Management System 跨站脚本漏洞

Computer Laboratory Management System is a computerized laboratory management system. A cross-site scripting vulnerability exists in Laboratory Management System version 1.0, which originates from an easy cross-site scripting attack via the name parameter in the user creation...

PT-2024-13348 · Teledyne Flir · Teledyne Flir M300

Name of the Vulnerable Software and Affected Versions: Teledyne FLIR M300 versions 2.00 through 2.00-19 Description: An issue was discovered where user account passwords are encrypted locally and can be decrypted to cleartext passwords using the umSetup utility, which requires root permissions to...

Malicious code in discord.js-hex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 015a5d02bee306302c82f2de4541e008c6ebcc61804819bf894aac181a1c9eac The OpenSSF Package Analysis project identified 'discord.js-hex' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

mysql: InnoDB unspecified vulnerability (CPU Oct 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Foundation 安全漏洞

Foundation is an application from Foundation, Inc. Foundation.app A security vulnerability exists in Foundation platform version 1.0, which originated from a vulnerability that allows remote attackers to gain access to sensitive information through the Web3 authentication process...

WordPress Login Logout Register Menu plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Login Logout Register Menu versions = 2.0...

Unspecified vulnerability in Tenda W9 (CNVD-2024-23316)

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version 1.0.0.74456, which stems from an incorrect operation of the parameter ssidIndex that can cause a stack-based buffer overflow. No details of the vulnerability are provided at this tim...

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE versions 7.8 through 16.9.6, 16.10...

CVE-2024-32718

Server-Side Request Forgery SSRF vulnerability in Webangon The Pack Elementor.This issue affects The Pack Elementor addons: from n/a through 2.0.8.2...

Xpdf 缓冲区错误漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf versions 4.05 and earlier, which stems from a vulnerability that allows an attacker to trigger an out-of-bounds array write...

PT-2024-29390

Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue is an out-of-bounds array write triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers. Recommendation...

CVE-2024-30920

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...

HCL Technologies HCL Connections 安全漏洞

HCL Technologies HCL Connections is a suite of enterprise collaboration platforms from HCL Technologies. A security vulnerability exists in HCL Technologies HCL Connections versions 7.0 and 8.0, which can be exploited by attackers to obtain sensitive information...

HCL Technologies HCL Connections 安全漏洞

HCL Technologies HCL Connections is a suite of enterprise collaboration platforms from HCL Technologies. A user enumeration vulnerability exists in HCL Technologies HCL Connections versions 7.0 and 8.0, which can be exploited by an attacker to determine if a user is valid, leading to a brute forc...

PYSEC-2024-252

PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

WordPress LoginPress Pro plugin < 3.0.0 - Captcha Bypass vulnerability

Captcha Bypass vulnerability discovered by Dave Jong Patchstack in WordPress Plugin LoginPress Pro versions 3.0.0...

WBSAirback Cross-Site Request Forgery Vulnerability

WBSAirback is a next generation storage and backup system from WBSAirback. A cross-site request forgery vulnerability exists in WBSAirback version 21.02.04, which can be exploited by an attacker to forge a malicious request to trick a victim into clicking on it to perform a sensitive operation...