16956 matches found
BELL-CVE-2023-40030
Bulletin has no description...
PT-2023-4584 · Qnap · Qnap Qts +1
Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.0.1.2425 build 20230609 QNAP QTS versions prior to 5.1.0.2444 build 20230629 QNAP QuTS hero h5.1.0 versions prior to 2424 build 20230609 Description: A cleartext transmission of sensitive information issue has bee...
CVE-2023-40176 SXSS in the user profile via the timezone displayer
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can exploit a stored XSS through their user profile by setting the payload as the value of the time zone user preference. Even though the time zone is selected from a drop...
Use-After-Free
chromium is vulnerable to Use-After-Free. This allows a malicious attacker to remotely compromise the render process resulting in heap corruption using a crafted HTML page...
BELL-CVE-2023-41105
Bulletin has no description...
GHSA-CRV8-R5WQ-GV2W webui-aria2 Path Traversal vulnerability
webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability...
CVE-2020-35357
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL GNU Scientific Library, versions 2.5 and 2.6. Processing a maliciously crafted input data for gslstatsquantilefromsorteddata of the library may lead to unexpected application termination or arbitra...
BELL-CVE-2022-48174
Bulletin has no description...
BELL-CVE-2022-48063
Bulletin has no description...
BELL-CVE-2022-48065
Bulletin has no description...
c-ares 缓冲区错误漏洞
c-ares is a C library for asynchronous DNS requests from the individual developers of c-ares. A security vulnerability exists in c-ares versions 1161 through 1170, which originates from a buffer overflow via the function aresparsesoareply in aresparsesoareply.c. The vulnerability is caused by the...
PT-2023-7628 · Asustor · Asustor Data Master
Name of the Vulnerable Software and Affected Versions: ASUSTOR Data Master ADM versions 4.0.6.RIS1 and below ASUSTOR Data Master ADM versions 4.1.0 and below ASUSTOR Data Master ADM versions 4.2.2.RI61 and below Description: The issue is related to improper privilege management in ASUSTOR Data...
PT-2023-19664 · Unknown · Pandora Fms
Name of the Vulnerable Software and Affected Versions: Pandora FMS versions prior to 7.67 Description: The issue allows an attacker to execute arbitrary system commands by exploiting an unrestricted file upload vulnerability in the Pandora FMS File Manager component. Recommendations: For versions...
PSF-2023-10 DoS when reading malformed Apple Property List files in binary format
readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...
MAL-2023-1516 Malicious code in ent-cas-common-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5431a932c9fdc7650aac9d95765b694034048878e15c4d0a97942d49eac96f05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-39660
An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function...
CVE-2023-39061
Cross Site Request Forgery CSRF vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote authenticated privileged attacker to execute arbitrary code...
PT-2023-29208 · Inure · Inure
Name of the Vulnerable Software and Affected Versions: inure versions prior to build88 Description: The issue concerns a missing authorization in the GitHub repository hamza417/inure. Recommendations: For versions prior to build88, update to a version that includes the necessary authorization fix...
