16956 matches found
PT-2024-26864 · Nix +1 · Nix +1
Name of the Vulnerable Software and Affected Versions: Nix versions prior to 2.22.1 Description: The issue makes it easier for attackers to replace current source code with attacker-controlled source code by luring a maintainer into accepting a malicious pull request. This is due to the mishandli...
BELL-CVE-2024-4603
Bulletin has no description...
CVE-2023-23888
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Rank Math Rank Math SEO allows Path Traversal.This issue affects Rank Math SEO: from n/a through 1.0.107.2...
BELL-CVE-2023-45733
Bulletin has no description...
BELL-CVE-2023-47855
Bulletin has no description...
PT-2024-12931 · WordPress · Wpvivid Backup/Migration
Name of the Vulnerable Software and Affected Versions: WPvivid Backup and Migration versions 0.9.90 and earlier Description: The issue is related to improper privilege management, allowing privilege escalation. This can be exploited, potentially leading to unauthorized access or control...
PT-2024-14086 · Repute Infosystems · Armember
Name of the Vulnerable Software and Affected Versions: Repute Infosystems ARMember versions through 4.0.10 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in Repute Infosystems ARMember. Recommendations: For versions through 4.0.10, update to a...
CVE-2023-47282
Out-of-bounds write in IntelR Media SDK all versions and some IntelR oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-22656
Out-of-bounds read in IntelR Media SDK and some IntelR oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-21837
Uncontrolled search path in some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
Impact of TunnelVision Vulnerability
The Palo Alto Networks Product Security Assurance team has evaluated the TunnelVision vulnerability as it relates to our products. This issue allows an attacker with the ability to send DHCP messages on the same local area network, such as a rogue Wi-Fi network, to leak traffic outside of the...
CVE-2024-3851 Unrestricted File Upload Leading to XSS in imartinez/privategpt
A stored Cross-Site Scripting XSS vulnerability exists in the 'imartinez/privategpt' repository due to improper validation of file uploads. Attackers can exploit this vulnerability by uploading malicious HTML files, such as those containing JavaScript payloads, which are then executed in the...
Intel PROSet/Wireless WiFi Software 安全漏洞
Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless WiFi Software prior to version 23.20 that stems from an incorrect input validation issue. It could allow an unauthenticated user to conduct a...
Siemens PS/IGES Parasolid Translator Component Type Obfuscation Vulnerability (CNVD-2024-27525)
Parasolild Translators is a single-format translator toolkit for high-speed end-to-end translation between Parasolid and several industry formats such as STEP or IGES. A type confusion vulnerability exists in the Siemens PS/IGES Parasolid Translator component that can be exploited by an attacker ...
PT-2024-13607
Name of the Vulnerable Software and Affected Versions IntelR Media SDK software all versions Description The issue is related to improper input validation, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations For all versions, consider...
Siemens PS/IGES Parasolid Translator component out-of-bounds read vulnerability (CNVD-2024-24528)
Parasolild Translators is a single-format translator toolkit for high-speed end-to-end translation between Parasolid and several industry formats such as STEP or IGES. An out-of-bounds read vulnerability exists in the Siemens PS/IGES Parasolid Translator component, which can be exploited by an...
CVE-2024-4947
Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
GHSA-8C85-4RR5-CHR4 Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS
This Security Advisory is about a vulnerability in VideoJS, which is bundled in DemoBundle and the ezdemo legacy extension. Older releases of VideoJS contain an XSS vulnerability in the Flash-based video player. This is bundled in DemoBundle, and in the Legacy "ezdemo" and "ezdemo-ls-extension"...
URL Manipulation
oceanic.js is vulnerable to a URL Manipulation. The vulnerability is due to improper input handling in certain functions such as Client.rest.channels.removeBan, which allows an attacker to manipulate the request specially crafted input to be normalized into unintended URLs, potentially resulting ...