CGA-6X9G-42R2-6RPP

Bulletin has no description...

CGA-462Q-V3P5-8VHW

Bulletin has no description...

CGA-42H7-CWV9-XXMQ

Bulletin has no description...

CGA-35M2-95P5-G9R8

Bulletin has no description...

CGA-2V65-JJP6-443W

Bulletin has no description...

CGA-V896-6482-8335

Bulletin has no description...

GHSA-C7P6-3C9C-F88Q Information Disclosure in TYPO3 CMS

HTTP requests being performed using the TYPO3 API expose the specific TYPO3 version to the called endpoint...

CVE-2024-1272 Information Disclosure to Source Code in TNB Mobile Solutions' Cockpit Software

Inclusion of Sensitive Information in Source Code vulnerability in TNB Mobile Solutions Cockpit Software allows Retrieve Embedded Sensitive Data. This issue affects Cockpit Software: before v0.251.1...

Dino Physics School Assistant Security Breach

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...

libigl 缓冲区错误漏洞

libigl is a simple C++ geometry processing library open-sourced by libigl. A buffer error vulnerability exists in libigl version v2.5.0. An attacker exploits this vulnerability to cause an out-of-bounds read via a specially crafted .msh file...

CVE-2024-4284

A vulnerability in mintplex-labs/anything-llm allows for a denial of service DoS condition through the modification of a user's id attribute to a value of 0. This issue affects the current version of the software, with the latest commit id 57984fa85c31988b2eff429adfc654c46e0c342a. By exploiting...

CVE-2024-4284 Denial of Service in mintplex-labs/anything-llm

A vulnerability in mintplex-labs/anything-llm allows for a denial of service DoS condition through the modification of a user's id attribute to a value of 0. This issue affects the current version of the software, with the latest commit id 57984fa85c31988b2eff429adfc654c46e0c342a. By exploiting...

WordPress Plugin Salient Shortcodes 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

DEBIAN-CVE-2023-38417

Improper input validation for some IntelR PROSet/Wireless WiFi software before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

PT-2024-32987 · Sourcecodester · Sourcecodester Open Source Clinic Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Open Source Clinic Management System version 1.0 Description: A critical issue has been found in the SourceCodester Open Source Clinic Management System, affecting an unknown functionality of the file setting.php. The...

PT-2024-22376 · Unknown · Sourcecodester School Task Manager

Name of the Vulnerable Software and Affected Versions: Sourcecodester School Task Manager version 1.0 Description: A vulnerability was identified within the subject name= parameter, enabling Stored Cross-Site Scripting XSS attacks. This issue allows attackers to manipulate the subject's name,...

PT-2024-25225 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS version 2.7.0 Description: An issue in Open5GS allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration. Recommendations: For Open5GS version 2.7.0, at the moment, there is no information about a new...

Shanghai Sunfull Automation BACnet Server HMI1002-ARM 安全漏洞

The Shanghai Sunfull Automation BACnet Server HMI1002-ARM is a WEB configuration gateway from Shanghai Sunfull in China. A security vulnerability exists in the Shanghai Sunfull Automation BACnet Server HMI1002-ARM version 2.0.4, which is caused by a buffer overflow...

PT-2024-25586 · Unknown · Atanas Yonkov Pliska

Name of the Vulnerable Software and Affected Versions: Atanas Yonkov Pliska versions 0.3.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-22570 · Ibm · Ibm Websphere Automation

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Automation version 1.7.0 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session...