JerryScript Security Vulnerability

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 3.0 that originates from allowing remote attackers to execute arbitrary code via the ecmastringbuilderappendraw component in...

ISL ARP Guard Cross-Site Scripting Vulnerability

ISL ARP Guard is a zero-trust web access solution from ISL Germany. A security vulnerability exists in ISL ARP Guard version v4.0.2, which originated from a vulnerability that allows an attacker to execute arbitrary web script or HTML via the urlstr URL parameter with a crafted payload...

UBUNTU-CVE-2023-36250

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...

CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

Malicious code in chain-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe5c6ddc619ecf45531efce44ef718865eb6f689b196a3ea770934897790c4b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FRRouting FRR 缓冲区错误漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR version 9.0 and prior versions, which stems from a failure to check the availability of two bytes during AIGP validation...

Fundraising Script 安全漏洞

Phpjabbers Fundraising Script is a simple open source Php donation script from Phpjabbers Serbia. It is used for charity fundraising. A security vulnerability exists in PHPJabbers Fundraising Script v1.0, which stems from a user enumeration vulnerability when resetting a password...

WordPress plugin DevBuddy Twitter Feed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2022-44215

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL...

Malicious code in mapsapi-area (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a12b68cea467324465b98ad4c7ffcddb67cac55eec195215bce156b916abbda The OpenSSF Package Analysis project identified 'mapsapi-area' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

QEMU 代码问题漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A code issue vulnerability exists in QEMU rocker device model 7.0.0 and earlier versions, which stems from a null pointer dereference issue in...

Geomatika IsiGeo Web 命令注入漏洞

Geomatika IsiGeo Web is Geomatika's geographic information system GIS software for the collection, management, analysis, and visualization of geospatial data. A security vulnerability exists in Geomatika IsiGeo Web version 6.0 that originates from allowing remote authenticated users to execute...

Titan FTP server 输入验证错误漏洞

Titan FTP Server is an FTP file transfer server. A security vulnerability exists in Titan FTP server version 19.0 and prior versions that stems from an open redirection issue that allows an attacker to redirect users to arbitrary URLs...

vsftpd 安全漏洞

vsftpd is an FTP File Transfer Protocol server for Unix-like systems. A security vulnerability exists in vsftpd version 3.0.3, which originated from allowing an attacker to cause a denial of service due to a limited number of allowed connections...

BoidCMS 代码问题漏洞

BoidCMS is a free open source flat file CMS for building simple websites and blogs, developed in PHP and using JSON as the database. A code issue vulnerability exists in BoidCMS version v.2.0.0, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the G...

WordPress plugin Manager for Icomoon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

USN-6288-1 mysql-8.0 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.34 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. In addition to security fixes, the updated packages contain bug fixes, new features...

PHP Code Issues Vulnerabilities

PHP is a scripting language for PHP that executes on the server side. PHP suffers from a code issue vulnerability that stems from loading external entities without XML enabled, resulting in a local file disclosure. Affected products and versions: PHP version 8.0 prior to 8.0.30, version 8.1 prior...

License and ciphers are missing after upgrading to the latest version on 13.0 and 13.1

License and ciphers are missing after upgrade to the latest version on 13.0 and 13.1...

PHOENIX CONTACTs WP 6xxx series web panels Security Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs, Germany. A security vulnerability exists in PHOENIX CONTACT WP 6xxx series versions prior to 4.0.10, which originates in the web panels, where a remote attacker with low privileges can gain limited read...