7 matches found
PT-2025-43737
Name of the Vulnerable Software and Affected Versions VirtueMart versions 1.0.0 through 4.4.10 Description An unauthenticated reflected Cross-Site Scripting XSS issue exists in VirtueMart. This allows an attacker to inject malicious scripts into a vulnerable web page viewed by other users. The...
EUVD-2025-34261
A path traversal in StarNet Communications Corporation FastX v.4 through v4.1.51 allows unauthenticated attackers to read arbitrary files...
PT-2024-23439 · Unknown · Fg Prestashop To Woocommerce
Name of the Vulnerable Software and Affected Versions: FG PrestaShop to WooCommerce versions n/a through 4.45.1 Description: The issue is related to the insertion of sensitive information into log files. This can potentially expose confidential data. There is no information provided about the...
PT-2023-4615 · Wireshark +3 · Wireshark +3
Name of the Vulnerable Software and Affected Versions: Wireshark versions 2.0.0 through 4.0.7 Description: The issue is related to a divide by zero error in the CP2179 component of Wireshark, which can be exploited by a remote attacker to cause a denial of service. This occurs due to a failure in...
SUSE CVE-2020-25603
An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier e.g., smp...
PT-2021-17888 · Silverstripe · Silverstripe Graphql Server
Name of the Vulnerable Software and Affected Versions: SilverStripe GraphQL Server versions 3.x through 3.4.1 Description: The issue concerns a permission checker not being inherited by a query subclass in the SilverStripe GraphQL Server. Recommendations: For versions 3.x through 3.4.1, update to...
PT-2013-2054 · Microsoft · .Net Framework
Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2 through 4.5 Description: A buffer overflow issue exists in the System.DirectoryServices.Protocols namespace method, allowing remote attackers to execute arbitrary code via a crafted XAML browser...