155 matches found
aerc 安全漏洞
aerc is a library by Robin Jarry Personal Developer. A security vulnerability exists in versions prior to aerc 93bec0d, which stems from a direct path concatenation of attachment part names that could lead to a directory traversal attack...
Gosoft Proticaret E-Commerce 跨站请求伪造漏洞
Gosoft Proticaret E-Commerce is an e-commerce platform solution from Gosoft Turkey. A cross-site request forgery vulnerability exists in Gosoft Proticaret E-Commerce versions prior to v6.0, which stems from unvalidated input leading to a cross-site request forgery attack...
SeaCMS 注入漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. An injection vulnerability exists in SeaCMS 13.3 and earlier versions, which stems from an SQL injection due to the operation of the...
OESA-2025-1351 vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...
DataEase 授权问题漏洞
DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insights into business trends for business improvement and optimization. An authorization issue vulnerability exists in DataEase versions prior to...
CVE-2025-27170
Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this iss...
WordPress plugin Wired Impact Volunteer Management 跨站脚本漏洞
WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Wir...
PT-2024-36259 · Unknown · Eduadmin Booking
Name of the Vulnerable Software and Affected Versions: EduAdmin Booking versions prior to 5.2.0 Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as 'Path Traversal', which allows PHP Local File Inclusion. This means that an attacker...
.NET 6.0 Update - November 12, 2024 (KB5047486)
None None...
WordPress plugin WordPress Mega Menu 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
LibreNMS 跨站脚本漏洞
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. A cross-site scripting vulnerability exists in LibreNMS version 24.7.0 and prior version...
Rocket.Chat 安全漏洞
Rocket.Chat is a chat program from Rocket.Chat Inc. A security vulnerability exists in Rocket.Chat. An attacker exploiting this vulnerability is able to abuse the UpdateOTRAck method. The following versions are affected: version 6.12.0, version 6.11.2, version 6.10.5, version 6.9.6, version 6.8.6...
PT-2024-38031 · Unknown · Control Fpwin Pro
Name of the Vulnerable Software and Affected Versions: Control FPWIN Pro versions 7.7.2.0 and all previous versions Description: A stack-based buffer overflow in Control FPWIN Pro may allow attackers to execute arbitrary code via a specially crafted project file. This issue can be exploited by...
PT-2024-5990
Name of the Vulnerable Software and Affected Versions Apache OFBiz versions prior to 18.12.16 Description The issue is related to Server-Side Request Forgery SSRF and Improper Control of Generation of Code 'Code Injection' vulnerability in Apache OFBiz. This vulnerability may allow a remote...
PT-2024-29624 · Unknown · Sinec Traffic Analyzer
Name of the Vulnerable Software and Affected Versions: SINEC Traffic Analyzer versions prior to V2.0 Description: A vulnerability has been identified in the SINEC Traffic Analyzer where the affected application does not properly enforce restrictions on excessive authentication attempts. This coul...
PT-2024-22672 · Intel · Intel Vtune Profiler
Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2024.1 Description: The issue is related to an uncontrolled search path in some IntelR VTuneTM Profiler software, which may allow an authenticated user to potentially enable escalation of privilege vi...
VNote 安全漏洞
VNote is an open source cross-platform Markdown note-taking tool from VNote Open Source. A security vulnerability exists in VNote 3.18.1 and earlier versions. An attacker can remotely execute code by exploiting the vulnerability...
CVE-2024-4882
The user may be redirected to an arbitrary site in Sitefinity 15.1.8321.0 and previous versions...
WordPress plugin iPages Flipbook security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...