ui-server 安全漏洞

ui-server is an open source library from temporal.io. A security vulnerability exists in ui-server versions prior to 2.25.0, which stems from a cross-site scripting XSS vulnerability in the timeline page...

CVE-2023-6047

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Algoritim E-commerce Software allows Reflected XSS.This issue affects E-commerce Software: before 3.9.2...

RHEL 8 : firefox (RHSA-2024:1491)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1491 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

PT-2024-2650 · Wolfssh · Wolfssh

Name of the Vulnerable Software and Affected Versions: wolfSSH versions prior to 1.4.17 Description: A vulnerability was found in wolfSSH's server-side state machine. This issue is related to shortcomings in the authentication procedure, allowing a malicious client to create channels without firs...

CVE-2024-27304 affecting package telegraf for versions less than 1.28.5-5

CVE-2024-27304 affecting package telegraf for versions less than 1.28.5-5. A patched version of the package is available...

TOMP Bare Server 安全漏洞

TOMP Bare Server is an open source library from Tomp Web Proxies. A security vulnerability exists in TOMP Bare Server versions prior to 2.0.2, which stems from improper handling of HTTP requests by the omphttp/bare-server-node package...

CVE-2022-45873 affecting package systemd-bootstrap for versions less than 250.3-17

CVE-2022-45873 affecting package systemd-bootstrap for versions less than 250.3-17. A patched version of the package is available...

FreeScout Log Information Disclosure Vulnerability

FreeScout is an ultra-lightweight and powerful free open source helpdesk and shared inbox built using PHP Laravel framework. A log message disclosure vulnerability exists in FreeScout versions prior to 1.8.124, which stems from a log message disclosure vulnerability in the component...

nGrinder Security Vulnerabilities

nGrinder is a stress testing platform that enables you to perform script creation, test execution, monitoring and results report generator simultaneously. A security vulnerability exists in versions prior to nGrinder 3.5.9 that stems from allowing the acceptance of serialized Java objects from...

Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 3 (6.0.1-89)

This update provides stability improvements. Vulnerability id: VSTOR-82695 Deploying a Kubernetes cluster may take longer than expected. Vulnerability id: VSTOR-82730 Restarting libvirtd causes EFI VMs to reboot...

PT-2024-21926 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat versions prior to 4.34 Description: A Server-Side Template Injection SSTI issue allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc web/modules/lhfaq/faqweight.php...

PT-2024-13529 · Unknown · Perfmatters

Name of the Vulnerable Software and Affected Versions: Perfmatters versions 2.1.6 and earlier Description: The issue is related to a Missing Authorization vulnerability in Perfmatters. Recommendations: For Perfmatters versions 2.1.6 and earlier, update to a version later than 2.1.6 to resolve the...

CVE-2023-39318 affecting package golang for versions less than 1.21.6-1

CVE-2023-39318 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...

CVE-2023-44487 affecting package golang for versions less than 1.21.6-1

CVE-2023-44487 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...

CVE-2023-39319 affecting package golang for versions less than 1.21.6-1

CVE-2023-39319 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...

PT-2024-14104 · Snakeyaml +1 · Snakeyaml +1

Name of the Vulnerable Software and Affected Versions: Hertzbeat versions prior to 1.4.1 Description: Hertzbeat is a real-time monitoring system. At the interface of "/define/yml", SnakeYAML is used as a parser to parse yml content, but no security configuration is used, resulting in a YAML...

CVE-2024-1062 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in logentryattr...

CVE-2023-48795 affecting package jsch for versions less than 0.1.55-2

CVE-2023-48795 affecting package jsch for versions less than 0.1.55-2. A patched version of the package is available...

WordPress plugin Page Builder: Pagelayer security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability in the WordPress...

SUSE CVE-2024-0744

In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploitable crash. This vulnerability affects Firefox 122...