7460 matches found
The vulnerability of the DNS Response Handler component of the Universal Monitoring System Agent in Zabbix allows a attacker to trigger buffer overflows.
The vulnerability of the DNS Response Handler component of the Zabbix universal monitoring agent is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger a buffer overflow...
CVE-2023-45889
A Universal Cross Site Scripting UXSS vulnerability in ClassLink OneClick Extension through 10.8 allows remote attackers to inject JavaScript into any webpage. NOTE: this issue exists because of an incomplete fix for CVE-2022-48612...
Cross site scripting
A Universal Cross Site Scripting UXSS vulnerability in ClassLink OneClick Extension through 10.8 allows remote attackers to inject JavaScript into any webpage. NOTE: this issue exists because of an incomplete fix for CVE-2022-48612...
CVE-2023-45889
A Universal Cross Site Scripting UXSS vulnerability in ClassLink OneClick Extension through 10.8 allows remote attackers to inject JavaScript into any webpage. NOTE: this issue exists because of an incomplete fix for CVE-2022-48612...
CVE-2023-45889
A Universal Cross Site Scripting UXSS vulnerability in ClassLink OneClick Extension through 10.8 allows remote attackers to inject JavaScript into any webpage. NOTE: this issue exists because of an incomplete fix for CVE-2022-48612...
aries-askar (=0.1.2), indy-credx (>=0.2.0 <=0.3.1) +5 more potentially affected by CVE-2024-21670 via ursa (>=0.3.6 <=0.3.7)
ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.0.6, =0.0.8 Source cves: CVE-2024-21670 Source advisory: OSV:GHSA-R78F-4Q2Q-HVV4...
Cross site scripting
This package provides universal methods to use multiple template engines with the Fiber web framework using the Views interface. This vulnerability specifically impacts web applications that render user-supplied data through this template engine, potentially leading to the execution of malicious...
CVE-2024-22199 Django Template Engine Vulnerable to XSS
This package provides universal methods to use multiple template engines with the Fiber web framework using the Views interface. This vulnerability specifically impacts web applications that render user-supplied data through this template engine, potentially leading to the execution of malicious...
CVE-2023-40383
creationtimestamp| type| source ---|---|--- 2024-01-10 23:26:42+00:00| seen| https://t.me/ctinow/166214 2024-01-30 11:16:21+00:00| seen| https://t.me/ctinow/175836 2025-06-17 17:42:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18641...
USN-6548-4 linux-gkeop vulnerabilities
It was discovered that Spectre-BHB mitigations were missing for Ampere processors. A local attacker could potentially use this to expose sensitive information. CVE-2023-3006 It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors i...
CVE-2023-6338
Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...
Path traversal
Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...
CVE-2023-6338
Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...
PT-2024-14934 · Lenovo · Lenovo Universal Device Client
Name of the Vulnerable Software and Affected Versions: Lenovo Universal Device Client UDC affected versions not specified Description: Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code wi...
Lenovo Universal Device Client Code Issue Vulnerability
Lenovo Universal Device Client is a universal device client from the Chinese company Lenovo. A code issue vulnerability exists in Lenovo Universal Device Client that originates from allowing an attacker with local access privileges to elevate privileges and execute code...
CVE-2023-49246
creationtimestamp| type| source ---|---|--- 2023-12-30 08:36:29+00:00| seen| https://t.me/ctinow/160810...
CVE-2023-5953
creationtimestamp| type| source ---|---|--- 2023-12-23 10:21:48+00:00| seen| Telegram/sTzANlDXmaDlJ59-VUABZJwblKj7h8xAL5HVnc7QydKXefC...
instipod DuoUniversalKeycloakAuthenticator challenge information disclosure vulnerability
Talos Vulnerability Report TALOS-2023-1907 instipod DuoUniversalKeycloakAuthenticator challenge information disclosure vulnerability December 23, 2023 CVE Number CVE-2023-49594 SUMMARY An information disclosure vulnerability exists in the challenge functionality of instipod...