16956 matches found
BELL-CVE-2024-32021
Bulletin has no description...
BELL-CVE-2024-32465
Bulletin has no description...
BELL-CVE-2024-32020
Bulletin has no description...
BELL-CVE-2024-26306
Bulletin has no description...
GHSA-FQW7-839J-HVXJ PHP Censor uses a weak hashing algorithm for the remember me key
php-censor v2.1.4 and fixed in v.2.1.5 was discovered to utilize a weak hashing algorithm for its rememberkey value. This allows attackers to bruteforce to bruteforce the rememberkey value to gain access to accounts that have checked "remember me" when logging in...
CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability...
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...
Cross-Site Scripting
mantisbt/mantisbt is vulnerable to Cross-Site Scripting. The vulnerability is due to improper user input sanitization of the custom field's name, allowing attackers to inject HTML and potentially execute arbitrary JavaScript in certain scenarios...
Intel® Ethernet Controller Administrative Tools Installer Software Advisory
Summary: A potential security vulnerability in some Intel® Ethernet Controller Administrative Tools installation software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21828 Description:...
idccms 安全漏洞
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Brokerage System is a cloud management brokerage system from China's Net Titanium Technology, Inc. A security vulnerability exists in version 1.35 of idccms, which contains a cross-site request forgery CSRF vulnerability...
Intel® CST Software Advisory
Summary: A potential security vulnerability in some Intel® Context Sensing Technology CST software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-40155 Description:...
Wind River VxWorks 安全漏洞
Wind River VxWorks is an operating system from Wind River Systems, Inc. the industry-leading real-time operating system for building embedded devices and systems. A security vulnerability exists in Wind River VxWorks versions 7 through 23.09 that originates from a buffer overflow...
CVE-2024-34707 Nautobot's BANNER_* configuration can be used to inject arbitrary HTML content into Nautobot pages
Nautobot is a Network Source of Truth and Network Automation Platform. A Nautobot user with admin privileges can modify the BANNERTOP, BANNERBOTTOM, and BANNERLOGIN configuration settings via the /admin/constance/config/ endpoint. Normally these settings are used to provide custom banner text at...
CVE-2024-34899
WWBN AVideo 12.4 is vulnerable to Cross Site Scripting XSS...
SQL Injection
openlink virtuoso-opensource is vulnerable to SQL Injection. The vulnerability is due to an issue in the sqlcuniondtwrap component, allowing attackers to cause a DoS via crafted SQL statements...
SQL Injection
openlink virtuoso-opensource is vulnerable to SQL Injection. The vulnerability is due to an issue in the gpfnotice component, enabling attackers to cause a DoS via crafted SQL statements...
Information leakage vulnerability in UFIDA U8+CRM of UFIDA Network Technology Co.
UFIDA is a leading provider of management software, ERP software, group management software, human resource management software, customer relationship management software, small business management software, financial and administrative institution management software, automotive industry...
SUSE-SU-2024:1598-1 Security update for less
This update for less fixes the following issues: - CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. bsc1222849...
Path Traversal
com.netflix.genie: genie-web is vulnerable to Path Traversal. The vulnerability is caused by improper filename validation in the saveAttachments method within LocalFileSystemAttachmentServiceImpl.java, due to missing checks to prevent a filename from starting with ... An attacker can upload a fil...