16956 matches found
VulnCheck KEV: CVE-2023-41954
Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege Escalation.This issue affects ProfilePress: from n/a through 4.13.1...
PT-2023-26775 · Unknown · Snmp Web Pro
Name of the Vulnerable Software and Affected Versions: SNMP Web Pro version 1.1 Description: An issue in the software allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted request. Recommendations: For SNMP Web Pro version 1.1, consider disabling the...
PT-2023-36006 · Git +1 · Libxaac
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash involves several functions, including iusace quantize lines, iusace...
PT-2023-27637 · Hkcms · Hkcms
Name of the Vulnerable Software and Affected Versions: HKcms version 2.3.0.230709 Description: The issue allows for Cross Site Scripting XSS, enabling the theft of administrator cookies. Recommendations: For HKcms version 2.3.0.230709, at the moment, there is no information about a newer version...
PT-2023-23132 · Tsplus · Tsplus Remote Access
Name of the Vulnerable Software and Affected Versions: TSplus Remote Access versions through 16.0.2.14 Description: An issue was discovered where credentials are stored as cleartext within the HTML source code of the login page. Recommendations: For versions through 16.0.2.14, consider disabling...
CVE-2023-4879 Cross-site Scripting (XSS) - Stored in instantsoft/icms2
Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git...
PT-2023-30958 · Unknown · Instantsoft/Icms2
Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1-git Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository instantsoft/icms2. This allows an attacker to make unauthorized requests on behalf of the server...
Use After Free in vim/vim
...
BELL-CVE-2023-39321
Bulletin has no description...
BELL-CVE-2023-39322
Bulletin has no description...
CVE-2023-39321 Panic when processing post-handshake message on QUIC connections in crypto/tls
Processing an incomplete post-handshake message for a QUIC connection can cause a panic...
The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.
The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.
The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
PT-2023-12119 · Mofi Network · Mofi4500-4Gxelte-V2
Name of the Vulnerable Software and Affected Versions: MoFi Network MOFI4500-4GXeLTE-V2 version 3.5.6-xnet-5052 Description: An issue was discovered that allows attackers to bypass authentication and execute arbitrary code via a crafted HTTP request. Recommendations: For MoFi Network...
CVE-2021-36021
Magento versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an Improper input validation vulnerability within the CMS page scheduled update feature. An authenticated attacker with administrative privilege could leverage this vulnerability to achieve remote code...
BELL-CVE-2023-4623
Bulletin has no description...
CVE-2023-41940
Jenkins TAP Plugin 2.3 and earlier does not escape TAP file contents, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control TAP file contents...
PT-2023-27163 · Tp Link · Archer C5400
Name of the Vulnerable Software and Affected Versions: Archer C5400 versions prior to Archer C5400JP V2 230506 Description: The issue allows a network-adjacent authenticated attacker to execute arbitrary OS commands. Recommendations: For versions prior to Archer C5400JP V2 230506, update the...
PT-2023-22922 · Unknown · Lmsassemblytrackerctc
Name of the Vulnerable Software and Affected Versions: LmsAssemblyTrackerCTC versions prior to SMR Sep-2023 Release 1 Description: The issue allows a local attacker to gain arbitrary file access through PendingIntent hijacking in LmsAssemblyTrackerCTC. Recommendations: For versions prior to SMR...