16956 matches found
Denial Of Service (DoS)
libfrr.so is vulnerable to Denial Of Service DoS. This vulnerability allows an to crash the application by exploiting a flaw in the way that FRRouting handles BGP labeled unicast parsing...
CVE-2019-25156
A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...
PT-2023-32351 · WordPress · Amazonify
Name of the Vulnerable Software and Affected Versions: Amazonify plugin for WordPress versions up to and including 0.8.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the amazonifyOptionsPage function. This allows unauthenticated...
BELL-CVE-2023-5678
Bulletin has no description...
CVE-2023-3399 Insertion of Sensitive Information Into Sent Data in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom...
CVE-2023-5825 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A low-privileged attacker can point a CI/CD Component to an incorrect path and cause the server to...
BIT-NGINX-INGRESS-CONTROLLER-2021-23055
On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller does not apply to Ingress objects. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
BIT-2020-15180
A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in wsrepsstmethod allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and...
PT-2023-29443 · 1E · 1E-Exchange-Urlresponsetime
Name of the Vulnerable Software and Affected Versions: 1E-Exchange-URLResponseTime instruction versions prior to v20.1 Description: The 1E-Exchange-URLResponseTime instruction does not properly validate the URL parameter, allowing for a specially crafted input to perform arbitrary code execution...
PT-2023-29445 · 1E · 1E-Exchange-Commandlineping
Name of the Vulnerable Software and Affected Versions: 1E-Exchange-CommandLinePing instruction versions prior to v18.1 Description: The 1E-Exchange-CommandLinePing instruction does not properly validate the input parameter, allowing for a specially crafted input to perform arbitrary code executio...
PT-2023-15306 · Unknown · The School Management – Education & Learning Management
Name of the Vulnerable Software and Affected Versions: The School Management – Education & Learning Management versions n/a through 4.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQ...
PT-2023-32446 · 1E · 1E Exchange End-User Interaction
Name of the Vulnerable Software and Affected Versions: 1E Exchange End-User Interaction product pack versions prior to 7.1 Description: The 1E-Exchange-DisplayMessage instruction does not properly validate the Caption or Message parameters, allowing for arbitrary code execution with SYSTEM...
PT-2023-35565 · Git +1 · Lcms
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported, involving functions such as cmsMLUsetWide, Type Text Description Read, and cmsReadTag...
AZL-34690 CVE-2023-47234 affecting package frr for versions less than 9.1-2
An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MPUNREACHNLRI attribute and additional NLRI data that lacks mandatory path attributes...
CVE-2023-25990
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10...
Command Injection
pip is vulnerable to Command Injection. While installing a package from Mercurial VCS URL, a specified mercurial URL could be used to inject arbitrary configuration options to the hg clone call. Controlling the Mercurial configuration can modify how and which repository is installed...
Cross Site Scripting
Reportico is vulnerable to Cross Site Scripting. The vulnerability is due to improper input sanitization in the project report title. The attacker can exploit this issue by injecting malicious JavaScript in the title field...
DEBIAN-CVE-2023-45024
Best Practical Request Tracker RT 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder...
PT-2023-32436 · Teamamaze · Amazefileutilities
Name of the Vulnerable Software and Affected Versions: teamamaze/amazefileutilities versions prior to 1.91 Description: The issue is related to improper authorization. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...