CVE-2024-48694

OfficeWeb365 versions 7.18.23.0 through 8.6.1.0 (developed by Xi'an Daxi Information Technology) are vulnerable to a File Upload vulnerability within the pw/savedraw component. A remote attacker can exploit this flaw to upload files, leading to arbitrary code execution and potential system compro...

CVE-2024-48694

File Upload vulnerability in Xi'an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18.23.0 allows a remote attacker to execute arbitrary code via the pw/savedraw component...

CVE-2024-48694

File Upload vulnerability in Xi'an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18.23.0 allows a remote attacker to execute arbitrary code via the pw/savedraw component...

Information Disclosure Vulnerability in YonBIP of UFIDA Network Technology Co.

YonBIP is a digital intelligence business innovation platform created by UFIDA Group, aiming to help enterprises realize digital intelligence transformation and business innovation. An information leakage vulnerability exists in YonBIP of UFIDA Network Technology Corporation, which can be exploit...

PT-2024-10298

Name of the Vulnerable Software and Affected Versions PLANET Technology switch software affected versions not specified Description The issue is related to an integer underflow, which can be exploited by an unauthenticated attacker sending a malformed HTTP request. This could potentially allow th...

Intel QAT Engine for OpenSSL software information disclosure vulnerability

The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. An information disclosure vulnerability exists in Intel QAT Engine for OpenSSL software, which can be exploited by...

CVE-2024-7787

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ITG Computer Technology vSRM Supplier Relationship Management System allows Reflected XSS, Cross-Site Scripting XSS. This issue affects vSRM Supplier Relationship Management System: before...

CVE-2024-7787 Reflected XSS in ITG Computer Technology's vSRM Supplier Relationship Management System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ITG Computer Technology vSRM Supplier Relationship Management System allows Reflected XSS, Cross-Site Scripting XSS. This issue affects vSRM Supplier Relationship Management System: before...

CVE-2024-7787 Reflected XSS in ITG Computer Technology's vSRM Supplier Relationship Management System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ITG Computer Technology vSRM Supplier Relationship Management System allows Reflected XSS, Cross-Site Scripting XSS. This issue affects vSRM Supplier Relationship Management System: before...

CVE-2024-7787

CVE-2024-7787 is a Reflected XSS vulnerability in ITG Computer Technology’s vSRM Supplier Relationship Management System, due to improper input neutralization during web page generation. Affected versions are before 28.08.2024. The issue is documented across multiple sources (NVD, CVE List, Red H...

decidim-meetings Cross-site scripting vulnerability in the online or hybrid meeting embeds

Impact The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. Patches Not available Workarounds Disable the creation of meetings by participants in the meeting component. References OWASP ASVS v4.0.3-5.1.3 Credits This issue wa...

GHSA-J4H6-GCJ7-7V9V decidim-meetings Cross-site scripting vulnerability in the online or hybrid meeting embeds

Impact The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. Patches Not available Workarounds Disable the creation of meetings by participants in the meeting component. References OWASP ASVS v4.0.3-5.1.3 Credits This issue wa...

Unauthorized Access Vulnerability in KingH5Stream of Beijing Asian Control Technology Development Co.

KingH5Stream is a live video streaming solution based on HTML5 technology. KingH5Stream by Beijing Asian Control Technology Development Co. Ltd. has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

Intel QAT 安全漏洞

The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. A control flow management deficiency vulnerability exists in Intel QAT Engine for OpenSSL software, which can be...

Intel QAT 安全漏洞

The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. An information disclosure vulnerability exists in Intel QAT Engine for OpenSSL software, which can be exploited by...

Intel CST Software Advisory - Lenovo Support US

No description provided...

CVE-2024-47593

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or...

CVE-2024-47593

CVE-2024-47593 : SAP NetWeaver Application Server ABAP contains an information disclosure vulnerability. An unauthenticated, network-accessible attacker can read files from the server only if a Web Dispatcher or Proxy is in use and the target file was previously opened or downloaded via an applic...

CVE-2024-47593 Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or...

Intel® QuickAssist Technology Engine for OpenSSL Advisory

Summary: Potential security vulnerabilities in the Intel® QuickAssist Technology Intel® QAT Engine for OpenSSL engine for OpenSSL software may allow information disclosure . Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-336...