CVE-2023-4459 affecting package kernel for versions less than 5.15.126.1-1

CVE-2023-4459 affecting package kernel for versions less than 5.15.126.1-1. A patched version of the package is available...

PT-2023-28670 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.22 froxlor version 2.1.0 Description: The issue concerns Business Logic Errors in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.22, update to version 2.0.22 or later. For versi...

CVE-2023-28866 affecting package kernel for versions less than 5.15.122.1-2

CVE-2023-28866 affecting package kernel for versions less than 5.15.122.1-2. A patched version of the package is available...

CVE-2022-3606 affecting package kernel for versions less than 5.15.122.1-2

CVE-2022-3606 affecting package kernel for versions less than 5.15.122.1-2. A patched version of the package is available...

CVE-2023-0615 affecting package kernel for versions less than 5.15.122.1-2

CVE-2023-0615 affecting package kernel for versions less than 5.15.122.1-2. A patched version of the package is available...

CVE-2023-3717

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Farmakom Remote Administration Console allows SQL Injection.This issue affects Remote Administration Console: before 1.02...

PT-2023-25601

Name of the Vulnerable Software and Affected Versions Digital Ant E-Commerce Software versions prior to 11 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2022-25883 affecting package nodejs for versions less than 16.20.1-2

CVE-2022-25883 affecting package nodejs for versions less than 16.20.1-2. A patched version of the package is available...

CVE-2023-3997

Splunk SOAR versions lower than 6.1.0 are indirectly affected by a potential vulnerability accessed through the user’s terminal. A third party can send Splunk SOAR a maliciously crafted web request containing special ANSI characters to cause log file poisoning. When a terminal user attempts to vi...

PT-2023-25975 · Unknown +1 · Plexis Archiver +1

Name of the Vulnerable Software and Affected Versions: Plexis Archiver versions prior to 4.8.0 Description: The issue arises when using AbstractUnArchiver for extracting an archive, potentially leading to arbitrary file creation and possibly remote code execution. This occurs when an archive entr...

Vyper 安全漏洞

Vyper is the Pythonic smart contract language for EVM. A security vulnerability exists in Vyper versions prior to 0.3.10 that stems from allowing ecrecover to return undefined data for invalid signatures...

CVE-2023-3159 affecting package kernel for versions less than 5.15.116.1-2

CVE-2023-3159 affecting package kernel for versions less than 5.15.116.1-2. A patched version of the package is available...

MyCompanyFiles Oliva Expertise EKS SQL注入漏洞

MyCompanyFiles Oliva Expertise EKS is a file management application from MyCompanyFiles, Inc. An SQL injection vulnerability exists in MyCompanyFiles Oliva Expertise EKS versions prior to 1.2, which stems from vulnerability to SQL injection attacks...

AZL-52711 CVE-2023-29406 affecting package golang for versions less than 1.20.7-1

The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value...

SUSE CVE-2023-37204

A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 115...

CVE-2023-33460 affecting package yajl for versions less than 2.1.0-19

CVE-2023-33460 affecting package yajl for versions less than 2.1.0-19. A patched version of the package is available...

CVE-2023-1891

The Accordion & FAQ WordPress plugin before 1.9.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting...

CVE-2023-32209

A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox 113...

CVE-2023-23914 affecting package cmake for versions less than 3.21.4-6

CVE-2023-23914 affecting package cmake for versions less than 3.21.4-6. A patched version of the package is available...

CVE-2023-28322 affecting package cmake for versions less than 3.21.4-6

CVE-2023-28322 affecting package cmake for versions less than 3.21.4-6. A patched version of the package is available...