Schweizerische Steuerkonferenz SSK eSteuerauszug 安全漏洞

Schweizerische Steuerkonferenz SSK eSteuerauszug is an electronic tax form standard from the Swiss team at Schweizerische Steuerkonferenz SSK. A security vulnerability in Schweizerische Steuerkonferenz SSK eSteuerauszug, which stems from an improperly set default setting in DocumentBuilder, could...

Enalean Tuleap 安全漏洞

Enalean Tuleap is a free and open source tool from the French company Enalean. It is used for end-to-end traceability of application and system development. A security vulnerability exists in Enalean Tuleap. An attacker exploiting the vulnerability could access sensitive information...

Snipe-IT 安全漏洞

Snipe-IT is an open source IT asset/license management system for snipe individual developers. A security vulnerability exists in Snipe-IT versions prior to 7.0.10 that stems from allowing remote code execution when an attacker knows the APPKEY...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab versions 11.6 through 17.2.9 prior,...

Znuny 安全漏洞

Znuny is a work order system from Znuny, Inc. A security vulnerability exists in Znuny versions 6.5.1 through 6.5.10, 7.0.1 through 7.0.16, and 6.0 that originates from a denial-of-service/redo attack that allows parsing of email content via email can result in high CPU usage and block the parsin...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab version 11.4 up to and including...

MAL-2024-9255 Malicious code in todomvc-app-css-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0c6d4197f21cc320b40acc6bd3816dbcb9c46fcfc93e32784f75f260ae8f80e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in updated-script-roblox-muscle-legends-script-e3lrsz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4ac788b3c76120ad7eceab18dee69aa2e73ca9d9392f00677491e6ffba02340 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9145 Malicious code in fanq3f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a313de13485cee7e4885e1deda80fad23737083106c054737c95fe0aa7f7c7e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Palo Alto Networks GlobalProtect 安全漏洞

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides features such as firewall monitoring and threat prevention. A security vulnerability exists in Palo Alto Networks GlobalProtect. An attacker could exploit the vulnerabili...

Palo Alto Networks Expedition 安全漏洞

Palo Alto Networks Expedition is a tool from Palo Alto Networks, Inc. that helps with configuration migration, tuning, and enrichment. A security vulnerability exists in Palo Alto Networks Expedition. An attacker could exploit the vulnerability to run arbitrary operating system commands as root...

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. A security vulnerability exists in RuoYi v4.7.9 and prior versions, which stems from a vulnerability that allows comments in the code generation function to escape, thereby injecting malicious code...

Webkul Krayin CRM 安全漏洞

Webkul Krayin CRM is a free and open source CRM solution for small and medium-sized businesses from Webkul India. A security vulnerability exists in Webkul Krayin CRM v1.3.0 that stems from vulnerability to cross-site scripting XSS attacks...

IoT Haat Smart Plug IH-IN-16A-S 安全漏洞

IoT Haat Smart Plug IH-IN-16A-S is a smart plug from IoT Haat. A security vulnerability exists in IoT Haat Smart Plug IH-IN-16A-S version v5.16.1, which stems from the presence of a session expiration insufficiency issue and lack of validation of authentication tokens, which could lead to an...

Solidigm DC Products 安全漏洞

Solidigm DC Products is a line of solid state drives from Solidigm. A security vulnerability exists in Solidigm DC Products that stems from improper resource management...

Mediawiki 安全漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. Mediawiki has a security vulnerability that stems from the presence of a stored cross-site...

Jordanknott Taskcafe 安全漏洞

Jordanknott Taskcafe is a project management tool developed in the Go language by Jordanknott. A security vulnerability exists in Jordanknott Taskcafe version 0.3.2, which stems from a lack of validation of cookie values, and allows any unauthenticated attacker who knows the ID of a registered us...

CADClick 安全漏洞

CADClick is a software solution from CADClick, Inc. that creates interactive catalogs of 2D/3D CAD data for individual customer CAD catalogs. A security vulnerability exists in CADClick v1.11.0 and earlier versions that stems from the presence of a SQL injection vulnerability that allows remote...

Juju 安全漏洞

Juju is an open source application orchestration engine from Canonical Juju Open Source. A security vulnerability exists in Juju that stems from the fact that an unprivileged user in the same network namespace can connect to an abstract domain socket and guess the JUJUCONTEXTID value to access th...

Juju 安全漏洞

Juju is an open source application orchestration engine from Canonical Juju Open Source. Juju has a security vulnerability in 该漏洞源于任何有权访问默认网络命名空间的用户都可以连接到@/var/lib/juju/agents/unit-xxxx-yyyy/agent.socket and performs operations normally reserved for the juju charm...