16955 matches found
BELL-CVE-2024-50070
Bulletin has no description...
BELL-CVE-2024-9632
Bulletin has no description...
BELL-CVE-2024-50087
Bulletin has no description...
BELL-CVE-2024-50077
Bulletin has no description...
BELL-CVE-2024-50078
Bulletin has no description...
CVE-2024-43984 WordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Podlove Podlove Podcast Publisher allows Code Injection.This issue affects Podlove Podcast Publisher: from n/a through 4.1.13...
CVE-2024-48311
Piwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Edit album function...
PT-2024-23213 · Hcl · Hcl Appscan Source
Name of the Vulnerable Software and Affected Versions: HCL AppScan Source versions 10.6.0 and below Description: The issue is related to improper validation of a TLS/SSL certificate for an executable. This could potentially lead to security risks if exploited. Recommendations: For HCL AppScan...
CVE-2024-51243
The eladmin v2.7 and before contains a remote code execution RCE vulnerability that can control all application deployment servers of this management system via DeployController.java...
The vulnerability of the Microsoft .NET software platform and the Visual Studio source code editor lies in the ability to exploit memory after it is released, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft .NET software platform and the Visual Studio source code editor is related to the possibility of using memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
PYSEC-2024-259
In PyTorch =2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing...
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models allows a hacker to trigger a service failure. This vulnerability is related to the handling of the null pointer.
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models is related to the handling of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2024-44277
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, visionOS 2.1, tvOS 18.1. An app may be able to cause unexpected system termination or corrupt kernel memory...
WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Woocommerce Product Design versions = 1.0.0...
SQL Injection
funadmin/funadmin is vulnerable to SQL Injection. The vulnerability is due to improper handling of the selectFields parameter in the index method of \backend\controller\auth\Auth.php, which allows an attacker to manipulate database queries...
PT-2024-7515 · Draytek · Draytek Vigor2960
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor2960 version 1.4.4 Description: An authorized remote code execution vulnerability exists due to the lack of neutralization of special elements used in the operating system command. This allows an attacker to execute arbitrary cod...
PT-2024-34669 · Tiki · Tiki
Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 27.1 Description: The issue allows users with specific permissions to insert a stored XSS payload in the Name field when creating or editing an external wiki. This can lead to the execution of malicious scripts...
PT-2024-34668 · Tiki · Tiki
Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 27.1 Description: The issue allows users with specific permissions to insert a stored XSS payload in the description, potentially leading to security breaches. Recommendations: For versions prior to 27.1, update to...
PT-2024-31085 · Apple · Ipados +5
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.7.1 iPadOS versions prior to 17.7.1 visionOS versions prior to 2.1 iOS versions prior to 18.1 iPadOS versions prior to 18.1 macOS Sequoia versions prior to 15.1 Safari versions prior to 18.1 Description: This issue wa...