468 matches found
KLA61980 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of...
CVE-2023-27846
SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges via the tvcmsblog, tvcmsvideotab, tvcmswishlist, tvcmsbrandlist, tvcmscategorychainslider, tvcmscategoryproduct, tvcmscategoryslider, tvcmspaymenticon, tvcmstestimonial...
CVE-2023-27795
An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key...
Xiaomi Router 命令注入漏洞
Xiaomi Router is a series of wireless routers from the Chinese company Xiaomi. A command injection vulnerability exists in Xiaomi Router. The vulnerability is due to insufficient screening of responses returned from an external interface. An attacker could use this vulnerability to gain privilege...
CVE-2023-39069
An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Active Directory authentication mechanism...
wger Cross-Site Scripting Vulnerability
wger is a self-hosted FLOSS fitness/exercise, nutrition and weight tracker written in Django. A security vulnerability exists in wger Workout Manager version v.2.2.0a3, which stems from a cross-site scripting vulnerability that allows remote attackers to gain privileges...
CVE-2023-36213
SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...
CVE-2023-36082
An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials...
CVE-2023-34644
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW3.01B11P204, RG-NBS and RG-S1930 series switches SWITCH3.01B11P218, RG-EG series business VPN routers EG3.01B11P216, EAP and RAP series wireless access points AP3.01B11P218, NBC series wirele...
Rockwell Automation ThinManager 路径遍历漏洞
Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. A path traversal vulnerability exists in Rockwell Automation ThinManager, which is caused by the program...
CVE-2023-27845
SQL injection vulnerability found in PrestaShop lekerawenocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo, and KerawenHelper::resetCheckoutSessionData components...
CVE-2023-34839
A Cross Site Request Forgery CSRF vulnerability in Issabel issabel-pbx v.4.0.0-6 allows a remote attacker to gain privileges via a Custom CSRF exploit to create new user function in the application...
IssabelPbx 跨站请求伪造漏洞
IssabelPbx is an open source Gui graphical user interface from the Issabel Foundation. It is used to control and manage Asterisk Pbx. A security vulnerability exists in Issabel issabel-pbx version v.4.0.0-6, which originated from a vulnerability that allows remote attackers to gain privileges via...
PT-2023-11583 · Greencms · Greencms
Name of the Vulnerable Software and Affected Versions: GreenCMS version 2.3 Description: A Cross Site Request Forgery issue allows an attacker to gain privileges via the adduser function of "index.php". Recommendations: For GreenCMS version 2.3, consider disabling the adduser function in...
Dell NetWorker 操作系统命令注入漏洞
Dell NetWorker is an application from Dell USA Inc. It provides forum discussion functionality for Dell Inc. An operating system command injection vulnerability exists in Dell NetWorker version 19.6.1.2. An attacker could exploit this vulnerability to execute arbitrary operating system commands o...
About the security content of iOS 15.7.6 and iPadOS 15.7.6
About the security content of iOS 15.7.6 and iPadOS 15.7.6 This document describes the security content of iOS 15.7.6 and iPadOS 15.7.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
CVE-2023-29837
Cross Site Scripting vulnerability found in Exelysis Unified Communication Solution EUCS v.1.0 allows a remote attacker to gain privileges via the URL path of the eucsAdmin login web page...
VulnCheck KEV: CVE-2014-0196
Linux Kernel contains a race condition vulnerability within the nttywrite function that allows local users to cause a denial-of-service DoS or gain privileges via read and write operations with long strings...
Ego Studio SuperClean 资源管理错误漏洞
Ego Studio SuperClean is a versatile and powerful phone cleaner, reliable optimizer for Android from Ego Studio. A security vulnerability exists in Ego Studio SuperClean version v.1.1.9, v.1.1.5. An attacker exploited the vulnerability to gain privileges via the updateinfo field of the default.xm...