16956 matches found
CVE-2023-31747
Wondershare Filmora 12 Build 12.2.1.2088 was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges...
CVE-2023-25440
Stored Cross Site Scripting XSS vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field...
PT-2023-21183 · Unknown · Solarview Compact Sv-Cpt-Mc310
Name of the Vulnerable Software and Affected Versions: SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 SolarView Compact SV-CPT-MC310F versions prior to Ver.8.10 Description: The issue is related to the use of hard-coded credentials, which may allow a remote authenticated attacker to lo...
PT-2023-20100 · Podlove · Podlove Subscribe Button Plugin
Name of the Vulnerable Software and Affected Versions: Podlove Podlove Subscribe button plugin versions 1.3.7 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...
PT-2023-19163 · Winwar Media · Wp Email Capture
Name of the Vulnerable Software and Affected Versions: Winwar Media WP Email Capture plugin versions = 3.9.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...
GHSA-H79M-5CM2-278C User data exposure in Apache InLong
Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.6.0. Users registered in InLong who joined later can see deleted users' data. Users are advised to upgrade to Apache InLong's 1.7.0 or...
OPENSUSE-SU-2023:0111-1 Security update for qt6-svg
This update for qt6-svg fixes the following issues: - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont munitsPerEm boo1211298...
PT-2023-19152 · WordPress · User Meta Manager
Name of the Vulnerable Software and Affected Versions: User Meta Manager plugin versions = 3.4.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
PT-2023-35844 · Git +1 · Wireshark
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...
PT-2023-15225 · WordPress · Stylistwp Extra Block Design
Name of the Vulnerable Software and Affected Versions: StylistWP Extra Block Design, Style, CSS for ANY Gutenberg Blocks plugin versions 0.2.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended...
CVE-2020-36694
An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet processing context, because the per-CPU sequence count is mishandled during concurrent iptables rules replacement. This could be exploited with the CAPNETADMIN capability in an...
OSV-2023-416 UNKNOWN READ in dxf_fixup_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59118 Crash type: UNKNOWN READ Crash state: dxffixupstring dwgdxfDIMENSIONALIGNEDprivate dwgdxfDIMENSIONALIGNED...
Remote Code Execution (RCE)
powerjob-server-core is vulnerable to Remote Code Execution RCE. The vulnerability exists because the library fails to implement access control, which allows an attacker to inject and execute malicious code through the template generator...
Denial Of Services (DoS)
vyper is vulnerable to Denial Of Services DoS. The vulnerability exists due to an integer overflow in the parseForrange function of stmt.py for loops of the form for i in rangex, x+N, which results in an application crash by assigning the iterator of a loop to a variable...
Groundhogg < 2.7.8.9 - Ticket Creation via CSRF
The plugin does not have CSRF check when creating a support ticket to the plugin author, which could allow attackers to make logged-in admins perform such action via a CSRF attack...
Apple Safari 资源管理错误漏洞
Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. Apple Safari 16.5 suffers from a resource management error vulnerability that stems from the fact that processing maliciously crafted web content may result in arbitrar...
CVE-2023-1763
Canon IJ Network Tool/Ver.4.7.5 and earlier supported OS: OS X 10.9.5-macOS 13,IJ Network Tool/Ver.4.7.3 and earlier supported OS: OS X 10.7.5-OS X 10.8 allows an attacker to acquire sensitive information on the Wi-Fi connection setup of the printer from the software...
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the allowed buffer data limits, allows attackers to access confidential data.
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...