12612 matches found
JVN#73178249: Improper restriction of XML external entity references (XXE) in Shinseiyo Sogo Soft
Shinseiyo Sogo Soft provided by The Ministry of Justice improperly restricts XML external entity references XXE CWE-611. Impact By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker. Solution Update the Software Update the software to the latest...
PT-2023-12236 · Qihoo 360 · Qihoo 360 Safeguard +2
Name of the Vulnerable Software and Affected Versions: Qihoo 360 Safeguard versions 12.1.0.1004 through 12.1.0.1005 Qihoo 360 Safeguard version 13.1.0.1001 Qihoo 360 Total Security versions 10.8.0.1060 through 10.8.0.1213 Qihoo 360 Safe Browser & 360 Chrome version 12 Description: The issue is a...
PT-2023-21581 · Unknown · Ui Desktop For Windows
Name of the Vulnerable Software and Affected Versions: UI Desktop for Windows versions 0.59.1.71 and earlier Description: A permission misconfiguration could allow a user to hijack VPN credentials while UID VPN is starting. Recommendations: For versions 0.59.1.71 and earlier, update to version...
PT-2023-2512 · Cisco · Cisco Industrial Network Director
Name of the Vulnerable Software and Affected Versions: Cisco Industrial Network Director affected versions not specified Description: A vulnerability in the Cisco Industrial Network Director could allow an authenticated, local attacker to read application data due to insufficient default file...
PT-2023-12233 · Qihoo 360 · Qihoo 360 Safeguard +3
Name of the Vulnerable Software and Affected Versions: Qihoo 360 Safeguard versions 12.1.0.1004 through 13.1.0.1001 Qihoo 360 Total Security versions 10.8.0.1060 through 10.8.0.1213 360 Safe Browser & 360 Chrome version 13.0.2170.0 Description: The issue is a buffer overflow that allows for the...
PT-2023-12235 · Qihoo · Qihoo 360 Safeguard
Name of the Vulnerable Software and Affected Versions: Qihoo 360 Safe guard versions 12.1.0.1004 through 12.1.0.1005 Qihoo 360 Safe guard version 13.1.0.1001 Description: The issue allows an attacker to escalate privileges due to a Buffer Overflow vulnerability. Recommendations: For Qihoo 360 Saf...
PT-2023-17882 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: A local escalation of privilege issue exists due to a possible way to keep the foreground service alive while the app is in the background. This could lead to local escalation of...
B. Braun Battery Pack SP with Wi-Fi
1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: B. Braun Melsungen AG Equipment: Battery Pack SP with Wi-Fi Vulnerability: Improper neutralization of directives in dynamically evaluated code 'Eval Injection' 2. RISK EVALUATION Successful exploitation...
PT-2023-14778 · Repute Infosystems · Arforms Form Builder
Name of the Vulnerable Software and Affected Versions: Repute InfoSystems ARForms Form Builder plugin versions 1.5.5 and earlier Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the...
PT-2023-2639 · Oracle · Oracle Banking Payments
Name of the Vulnerable Software and Affected Versions: Oracle Banking Payments versions 14.5 through 14.7 Description: The issue is related to insufficient input validation in the Book/Internal Transfer component of Oracle Banking Payments, allowing a remote attacker to gain read, modify, add, or...
PT-2023-2648 · Oracle · Oracle Health Sciences Inform
Name of the Vulnerable Software and Affected Versions: Oracle Health Sciences InForm versions prior to 6.3.1.3 Oracle Health Sciences InForm versions prior to 7.0.0.1 Description: The issue is related to insufficient input validation in the Core component of Oracle Health Sciences InForm. It allo...
PT-2023-2666 · Oracle · Oracle Sql Developer
Name of the Vulnerable Software and Affected Versions: Oracle SQL Developer versions prior to 23.1.0 Description: The issue is related to insufficient input validation in the Installation component of Oracle SQL Developer, allowing a high-privileged attacker with logon to the infrastructure where...
SUSE-SU-2023:1867-1 Security update for gradle
This update for gradle fixes the following issues: - CVE-2021-29428: Fixed a local privilege escalation through system temporary directory. bsc1184807...
PT-2023-22058 · Juniper Networks +1 · Juniper Networks Paragon Active Assurance +1
Name of the Vulnerable Software and Affected Versions: Juniper Networks Paragon Active Assurance versions prior to 4.1.2 Description: An issue in the timescaledb feature of Juniper Networks Paragon Active Assurance allows an attacker to bypass existing firewall rules and limitations used to...
PT-2023-14539 · Unknown · Touchdown Timesheet Tracking Component For Jira
Name of the Vulnerable Software and Affected Versions: TouchDown Timesheet tracking component for Jira version 4.1.4 Description: The issue allows for XSS in the calendar view. Recommendations: For version 4.1.4, update to a version that fixes the XSS issue in the calendar view, as the current...
JVN#87559956: Joruri Gw vulnerable to cross-site scripting
Joruri Gw provided by SiteBridge Inc. is groupware. Message Memo function of Joruri Gw contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is accessing the specific page of the product. Solution Update the software...
PT-2023-16512 · Bestwebsoft · The Gallery
Name of the Vulnerable Software and Affected Versions: The Gallery by BestWebSoft WordPress plugin versions prior to 4.7.0 Description: The issue arises from improper sanitization of gallery information, leading to a Stored Cross-Site Scripting vulnerability. An attacker must have at least the...
PT-2023-22714 · WordPress · Kilian Evang Ultimate Noindex Nofollow Tool Ii
Name of the Vulnerable Software and Affected Versions: Kilian Evang Ultimate Noindex Nofollow Tool II plugin versions prior to 1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...
PT-2023-14289 · Open Xchange · Ox App Suite
Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.6-rev30 Description: The issue allows for cross-site scripting XSS via an activity tracking adapter defined by jslob. This can potentially lead to malicious script execution on the client-side...