16962 matches found
PT-2024-3901 · Xnsoft · Xnsoft Nconvert
Name of the Vulnerable Software and Affected Versions: XNSoft NConvert version 7.163 Description: The issue is related to a Buffer Overflow in the heap, allowing remote attackers to cause a denial of service via a crafted xwd file. This can be exploited by sending a specially crafted file, leadin...
MAL-2024-77 Malicious code in nylas-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f55a9a93c44b5c1883d56e29e04686d00c22261be8470feb04163ac33f285c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-21667 Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts
pimcore/customer-data-framework is the Customer Management Framework for management of customer data within Pimcore. An authenticated and unauthorized user can access the GDPR data extraction feature and query over the information returned, leading to customer data exposure. Permissions are not...
WWBN AVideo Improper Restriction of Excessive Authentication Attempts vulnerability
A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to captcha bypass, which can be abused by an attacker to bruteforce users credentials. An attacker can send a seri...
Integer Overflow
Azure uAMQP is vulnerable to Integer Overflow. The vulnerability is caused due to a missing check for the binary value length in the internaldecoderdecodebytes function within amqpvalue.c. An attacker can possibly trigger Remote Code Execution as a result of this flaw...
BELL-CVE-2023-41056
Bulletin has no description...
CVE-2024-20672
.NET Denial of Service Vulnerability...
BELL-CVE-2024-0340
Bulletin has no description...
CVE-2024-22125
Under certain conditions the Microsoft Edge browser extension SAP GUI connector for Microsoft Edge - version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality...
Infoblox NIOS Cross-Site Scripting Vulnerability
Infoblox NIOS is an operating system that powers Infoblox core network services. It ensures uninterrupted operation of the network infrastructure. A cross-site scripting vulnerability exists in Infoblox NIOS version v8.5.2-409296, which originates from a vulnerability that allows an attacker to...
PT-2024-1053
Name of the Vulnerable Software and Affected Versions Microsoft.Data.SqlClient and System.Data.SqlClient affected versions not specified Description A security-feature bypass vulnerability in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider allows attackers to affect the...
BELL-CVE-2021-3600
Bulletin has no description...
CVE-2023-52222 WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Automattic WooCommerce.This issue affects WooCommerce: from n/a through 8.2.2...
CVE-2022-2585
It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...
CVE-2023-35996
Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...
PT-2024-12482 · Gtkwave · Gtkwave
Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: A vulnerability exists in the LXT2 num time table entries functionality, allowing for an out-of-bounds write. This can be triggered by a specially crafted .lxt2 file, potentially leading to arbitrary code...
CVE-2023-50612
Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local attackers to escalate privileges and obtain sensitive information via the cloud accounts parameter...
The vulnerability of the software for working with Azure Machine Learning algorithms lies in the lack of protection for service data, which allows a malicious actor to gain unauthorized access to the device.
The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...
Stored Cross Site Scripting (XSS)
class.upload.php is vulnerable to Stored Cross Site Scripting. The vulnerability is due to improper validation on uploaded files. This issue can be exploited by an attacker via uploading malicious files leading to the execution of arbitrary JavaScript...