10610 matches found
Server-Side Request Forgery
Gomatrixserverlib is vulnerable to server-side request forgery SSRF. The vulnerability is due to improper validation of network requests, allowing the library to serve content from a private network it can access under certain conditions, which attackers can exploit to access internal network...
ROS-20250117-07
A vulnerability in the dmaengine component of the Linux operating system kernel is related to the transfer of private resources. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the powerpc/fixmap component of the Linux kernel is related to...
WordPress WP-HR Manager plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP-HR Manager: The Human Resources Plugin for WordPress versions = 3.1.0...
The vulnerability of Windows COM Server servers allows attackers to gain unauthorized access to protected information.
The vulnerability of Windows COM Server operating system servers is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
[SECURITY] Fedora 41 Update: perl-Net-OAuth-0.30-1.fc41
Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...
The vulnerability of Websoft HCM’s automation software for HR processes lies in the ability to load arbitrary files, allowing attackers to execute arbitrary code.
The vulnerability of Websoft HCM’s automation software for HR processes lies in the ability to load arbitrary files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by creating a specially crafted file...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in Azure products. A malicious person with prior authentication could exploit the vulnerabilities to gain access to sensitive data in the victim's context. Successful misuse requires the victim to log in, where the malicious person manages to win a race...
CVE-2024-46668
An allocation of resources without limits or throttling vulnerability CWE-770 in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions 7.0.0 through 7.0.15, and versions 6.4.0 through 6.4.15 may allow an unauthenticated remote user to consume all system memory via multiple...
Fortinet Fortigate Unchecked boundary length causing multiple logic flaws (FG-IR-24-250)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-250 advisory. - An allocation of resources without limits or throttling CWE-770 vulnerability in FortiOS versions 7.6.0, versions 7.4.4...
PT-2025-1237 · Microsoft · Outlook +1
Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to a remote code execution problem. It is associated with incorrect restriction of file names and other resources in Microsoft Office and Outlook. Exploitatio...
The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the improper assignment of permissions to critical resources. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerabilities in the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP are related to the improper assignment of permissions to critical resources. Exploiting these vulnerabilities can allow attackers, operating remotely, to...
Invoice Ninja 代码问题漏洞
Invoice Ninja is an available invoice, quote, project and time tracking application built with Laravel by Invoice Ninja open source. A code issue vulnerability exists in Invoice Ninja versions 5.8.56 through 5.11.23. An attacker can exploit the vulnerability to read arbitrary files and request...
Privilege Escalation
github.com/karmada-io/karmada is vulnerable to Privilege Escalation. The vulnerability is due to pull mode clusters being registered with excessive access to control plane resources via the karmadactl register command, allowing them excessive privileges to control plane resources...
The vulnerability of the Rancher Manager software for managing Kubernetes clusters lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges.
The vulnerability of the Rancher Manager software for managing Kubernetes clusters is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
EulerOS 2.0 SP10 : dhcp (EulerOS-SA-2025-1019)
According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded...
CISA: Federally Sponsored C-IED Training and Education Resources Catalog
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Building Relationships with First Responders: Tools and Resources
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2019 Edition - Violence in the Federal Workplace: Appendices A, B, and C: Awareness, Resources, and Case Studies
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...