16956 matches found
BELL-CVE-2023-6816
Bulletin has no description...
BELL-CVE-2023-45236
Bulletin has no description...
BELL-CVE-2023-45230
Bulletin has no description...
The vulnerability of the microprogrammed software in the Moxa OnCell G3150A-LTE industrial LTE modem, related to the transmission of data in an open manner, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the microprogrammed software in the Moxa OnCell G3150A-LTE industrial LTE modem lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
CVE-2023-6395
The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. This weakness stems from the absence of proper sandboxing during the expansion and execution of Jinja2 templates, whic...
BELL-CVE-2024-0565
Bulletin has no description...
BELL-CVE-2023-6915
Bulletin has no description...
CVE-2023-4925 Easy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site Scripting
The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
Buffer Overflow
libuev.so is vulnerable to Buffer Overflow. The vulnerability is due to insufficient maxevents validation within uev.c. An attacker can perform a buffer overflow by submitting a large maxevents value...
Trellix Central Management Cross-Site Scripting Vulnerability
Trellix Central Management is a centralized management system from Trellix, Inc. It consolidates the management, reporting and data sharing of Trellix products into one easy-to-deploy system. A cross-site scripting vulnerability exists in Trellix Central Management version 9.1.1.956704, which ste...
PT-2024-13540 · Alinto +2 · Alinto Sogo +2
Name of the Vulnerable Software and Affected Versions: Alinto SOGo versions 5.8.0 through 5.9.0 Description: The issue is related to HTML Injection. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
CVE-2022-4962 Apollo Configuration Center users improper authorization
A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /users of the component Configuration Center. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been...
CVE-2023-2030 Improper Verification of Cryptographic Signature in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits...
PYSEC-2024-10
In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verification. Unless emerge-webrsync is used, Portage is not vulnerable...
PT-2024-3901 · Xnsoft · Xnsoft Nconvert
Name of the Vulnerable Software and Affected Versions: XNSoft NConvert version 7.163 Description: The issue is related to a Buffer Overflow in the heap, allowing remote attackers to cause a denial of service via a crafted xwd file. This can be exploited by sending a specially crafted file, leadin...
MAL-2024-77 Malicious code in nylas-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f55a9a93c44b5c1883d56e29e04686d00c22261be8470feb04163ac33f285c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-21667 Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts
pimcore/customer-data-framework is the Customer Management Framework for management of customer data within Pimcore. An authenticated and unauthorized user can access the GDPR data extraction feature and query over the information returned, leading to customer data exposure. Permissions are not...
WWBN AVideo Improper Restriction of Excessive Authentication Attempts vulnerability
A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to captcha bypass, which can be abused by an attacker to bruteforce users credentials. An attacker can send a seri...
Integer Overflow
Azure uAMQP is vulnerable to Integer Overflow. The vulnerability is caused due to a missing check for the binary value length in the internaldecoderdecodebytes function within amqpvalue.c. An attacker can possibly trigger Remote Code Execution as a result of this flaw...