16955 matches found
Qualys TRU Uncovers Five Local Privilege Escalation Vulnerabilities in needrestart
The Qualys Threat Research Unit TRU has identified five Local Privilege Escalation LPE vulnerabilities within the needrestart component, which is installed by default on Ubuntu Server. These vulnerabilities can be exploited by any unprivileged user to gain full root access without requiring user...
Cross-site Scripting (XSS)
django-cms is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of input during web page generation, allowing malicious scripts to be injected and executed...
BELL-CVE-2024-52616
Bulletin has no description...
BELL-CVE-2024-52615
Bulletin has no description...
Insecure File Upload
agnai is vulnerable to an Insecure File Upload. The vulnerability is due to insufficient validation of user-uploaded files, allows attackers to choose the location where the files are stored on the server. potentially leading to overwriting existing files or uploading files to unintended...
PT-2024-32980 · Unknown · Weaver E-Cology
Name of the Vulnerable Software and Affected Versions: Weaver E-cology versions 9.x Description: The issue allows attackers to construct special requests to insert remote malicious code and trigger malicious code execution, potentially gaining control of server privileges. It is related to a SQL...
PT-2024-34776 · Unknown · Sh Slideshow
Name of the Vulnerable Software and Affected Versions: SH Slideshow versions prior to 4.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions prior to 4.3, update to a version that includes a fix for this issue. As a...
CVE-2021-1440
A vulnerability in the implementation of the Resource Public Key Infrastructure RPKI feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol BGP process to crash, resulting in a denial of service DoS condition. This vulnerability is du...
CVE-2021-1424
A vulnerability in the ipsecmgr process of Cisco ASR 5000 Series Software StarOS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to insufficient validation of incoming Internet Key Exchange Version 2 IKEv2 packets. An attacker...
CVE-2024-52436 WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saad Iqbal Post SMTP post-smtp allows Blind SQL Injection.This issue affects Post SMTP: from n/a through = 2.9.9...
OSV-2024-1320 Heap-buffer-overflow in process_page_
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379254072 Crash type: Heap-buffer-overflow READ 4 Crash state: processpage FLACoggdecoderaspectskiplink FLACstreamdecoderseekabsolute...
CGA-56F7-WQ2J-GQHC
Bulletin has no description...
BELL-CVE-2024-10977
Bulletin has no description...
CVE-2024-44758
An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...
CVE-2024-49536 Audition | Out-of-bounds Read (CWE-125)
Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vict...
CVE-2024-52528 Auth Token can be passed dummy or wrong the middleware response is 200 OK
Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for Budget Control. Budget Control Gateway does not properly validate auth tokens, which allows attackers to bypass intended restrictions. This vulnerability is fixed in 1.5.2...
GHSA-C86Q-RJ37-8F85 LibreNMS has a stored XSS in ExamplePlugin with Device's Notes
Summary The application fail to sanitising inputs properly and rendering the code from user input to browser which allow an attacker to execute malicious javascript code. Details User with Admin role can add Notes to a device, the application did not properly sanitize the user input, when the...
OSV-2024-1312 Heap-buffer-overflow in jv_string_vfmt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378836890 Crash type: Heap-buffer-overflow READ 13 Crash state: jvstringvfmt jvstringfmt jvparsesizedcustomflags...
PT-2024-13380 · Gpac +2 · Gpac +2
Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-revrelease Description: A use after free issue exists, specifically in the gf filterpacket del function in filter core/filter.c at line 38. This can lead to a double-free condition, potentially causing the application to...