16955 matches found
BELL-CVE-2024-9407
Bulletin has no description...
CVE-2024-45964
Zenario 9.7.61188 is vulnerable to Cross Site Scripting XSS in the Image library via the "Organizer tags" field...
JTEKT Kostac PLC Programming Software 安全漏洞
JTEKT Kostac PLC Programming Software is a PLC programmer software for personal computers from JTEKT Japan. A security vulnerability exists in JTEKT Kostac PLC Programming Software version 1.6.14.0 and prior versions, which stems from the presence of a stack-based buffer overflow vulnerability...
PT-2024-31856 · Zenario · Zenario
Name of the Vulnerable Software and Affected Versions: Zenario version 9.7.61188 Description: The issue allows authenticated admin users to upload PDF files containing malicious code into the target system. If the PDF file is accessed through the website, it can trigger a Cross Site Scripting XSS...
HP One Agent Software 安全漏洞
HP One Agent is an application from Hewlett-Packard HP USA. A security vulnerability exists in HP One Agent Software that stems from an elevation of privilege issue...
PT-2025-25239 · Trend Micro · Trend Micro Apex One Damage Cleanup Engine
Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One Damage Cleanup Engine affected versions not specified Description: A link following issue could allow a local attacker to escalate privileges on affected installations. The attacker must first obtain the ability to execut...
PUB-A-299774545
Bulletin has no description...
Cross Site Scripting(XSS)
Filament is vulnerable to cross-site scripting XSS. The vulnerability is due to improper validation of values passed to the ColorColumn or ColumnEntry, allowing untrusted input to be rendered in a way that can execute malicious scripts...
PT-2024-37591 · Parisneo · Lollms-Webui
Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui versions below v9.8 Description: A Local File Inclusion issue exists due to unverified path concatenation in the serve js function in app.py, allowing attackers to perform path traversal attacks. This can lead to...
PT-2024-10155 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.9 through 17.4.6 GitLab CE/EE versions 17.5 through 17.5.4 GitLab CE/EE versions 17.6 through 17.6.2 Description: An issue exists in GitLab CE/EE that allows a remote attacker to cause uncontrolled CPU consumption,...
The vulnerability of the microprogrammed logic controller (PLC) Advantech ADAM-5630 software, related to the falsification of inter-site requests, allows a intruder to intercept the user’s session.
The vulnerability of the microprogrammed logic controller PLC Advantech ADAM-5630 software is related to the manipulation of intersite requests. Exploiting this vulnerability allows a malicious actor to intercept the user’s session remotely...
BELL-CVE-2024-9026
Bulletin has no description...
BELL-CVE-2024-8925
Bulletin has no description...
BELL-CVE-2024-8927
Bulletin has no description...
BELL-CVE-2024-46855
Bulletin has no description...
BELL-CVE-2024-46849
Bulletin has no description...
BELL-CVE-2024-46852
Bulletin has no description...
BELL-CVE-2024-46843
Bulletin has no description...