Mezzanine Security Breach

Github Mezzanine is a powerful, consistent and flexible content management platform. A security vulnerability exists in Mezzanine version v6.0.0, which stems from a vulnerability that allows an attacker to bypass the access control mechanism in the admin panel via a specially crafted request...

Exploit for Improper Access Control in Jupo Mezzanine

Product: Mezzanine CMS Version: v6.0.0 Date found: 10.01.2024...

Weston Embedded uC-TCP-IP Security Vulnerability

Weston Embedded uC-TCP-IP is a TCP/IP stack for embedded systems from Weston Embedded. A security vulnerability exists in Weston Embedded uC-TCP-IP version v3.06.01 that stems from a denial of service vulnerability in the ICMP and ICMPv6 parsing functions...

CVE-2024-25407

SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attackers to cause a Denial of Service DoS by using the predicted transaction ID's to terminate other transactions...

PT-2024-1592

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 6.0.16 and 7.0.3 Description Suricata is a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. An attacker can craft traffic to cause Suricata to use far more CPU...

Atmail SQL Injection Vulnerability

Atmail is an email hosting service from Atmail. It is used to ensure a secure, stable, scalable and private customer email platform. An SQL injection vulnerability exists in Atmail version v6.6.0, which stems from an SQL injection vulnerability in the login page...

PT-2024-14331 · Relic · Relic-Toolkit

Name of the Vulnerable Software and Affected Versions: Relic relic-toolkit version 0.6.0 Description: An issue in the cp bbs sig function allows a remote attacker to obtain sensitive information and escalate privileges. The issue is located in the relic/src/cp/relic cp bbs.c file of the Relic...

PT-2024-11503 · WordPress · The Super Forms - Drag & Drop Form Builder

Name of the Vulnerable Software and Affected Versions: The Super Forms - Drag & Drop Form Builder WordPress plugin versions prior to 6.0.4 Description: The issue is related to a Reflected Cross-Site Scripting problem. The bob czy panstwa sprawa zostala rozwiazana parameter is not properly escaped...

Atlassian Confluence Security Vulnerability

Atlassian Confluence is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia that can also be used to build enterprise WiKi. A security vulnerability exists in Atlassian Confluence Data Center and Server that stems from the presence of a remot...

OESA-2024-1051 netdata security update

netdata is the fastest way to visualize metrics. It is a resource efficient, highly optimized system for collecting and visualizing any type of realtime time-series data, from CPU usage, disk activity, SQL queries, API calls, web site visitors, etc. netdata tries to visualize the truth of now, in...

BELL-CVE-2022-2602 CVE-2022-2602 does not affect BellSoft software

Bulletin has no description...

UBUNTU-CVE-2024-0208

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file...

PaddlePaddle Operating System Command Injection Vulnerability

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle 2.6.0 version of the previous security vulnerability, the vulnerability stems from may lead to remote code execution vulnerability...

Tiny Technologies TinyMCE Cross-Site Scripting Vulnerability

Tiny Technologies TinyMCE is a rich text editor from Tiny Technologies, USA. A cross-site scripting vulnerability exists in Tiny Technologies TinyMCE prior to version 5.6.0, which originated from a vulnerability that could allow a remote attacker to insert crafted HTML into the editor, resulting ...

PT-2023-30369 · Growi · Growi

Name of the Vulnerable Software and Affected Versions: GROWI versions prior to v6.0.0 Description: A stored cross-site scripting vulnerability exists, exploiting a behavior of the XSS Filter. If this issue is exploited, an arbitrary script may be executed on the web browser of the user who access...

deepin-reader Security Vulnerabilities

deepin-reader is a small, fast, full-featured document viewing tool open source by Wuhan deepin Technology Co. deepin-reader 6.0.7 before the version of a security vulnerability , the vulnerability stems from the existence of file overwrite vulnerability , which may lead to remote code execution...

PT-2023-7893 · Sap · Sap Btp Security Services Integration Library +2

Name of the Vulnerable Software and Affected Versions: SAP BTP Security Services Integration Library @sap/xssec versions 3.6.0 Description: The issue is related to insecure privilege management in the SAP XS Advanced sap/xssec library, which is part of the SAP Business Technology Platform BTP. Th...

CVE-2023-48967

Ssolon = 2.6.0 and =2.5.12 is vulnerable to Deserialization of Untrusted Data...

Squid Resource Management Error Vulnerability

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A resource management error vulnerability exists in versions prior to Squid 6.0.1, which stems from the presence of a...

CVE-2022-35638

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230824...