PT-2023-22342 · Jmsslider +1 · Jmsslider +1

Name of the Vulnerable Software and Affected Versions: PrestaShop jmsslider version 1.6.0 Description: The issue is related to Incorrect Access Control. It affects the ajax jmsslider.php file. Recommendations: For PrestaShop jmsslider version 1.6.0, consider restricting access to the ajax...

PrestaShop 代码问题漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop jmsslider version 1.6.0, which stems from vulnerability to...

WordPress plugin VaultPress 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin VaultPress...

Apache InLong Security Bypass Vulnerability (CNVD-2023-42958)

Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.4.0 through 1.6.0. The vulnerability is caused due to a resource being exposed to the wrong sphere flaw. An attacker can...

Warpinator 路径遍历漏洞

Warpinator is an open source file sharing library for Linux Mint that shares files across a LAN. Files are sent and received over a local network. A security vulnerability exists in Warpinator versions prior to 1.6.0 that stems from allowing remote deletion of files via directory traversal in...

WordPress Health Check & Troubleshooting Plugin < 1.6.0 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:healthcheck%26troubleshooting"; ifdescription...

Apache InLong 安全漏洞

Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.4.0 through 1.6.0, which can be exploited by an attacker to delete, edit, stop, and start another person's source...

Apache InLong 安全漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. An elevation of privilege vulnerability exists in Apache InLong versions 1.2.0 through 1.6.0, which can be exploited by an attacker to elevate privileges...

SUSE CVE-2023-31982

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capturepacketreasmip at /src/capture.c...

SUSE CVE-2023-31981

Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packetsetpayload at /src/packet.c...

DEBIAN-CVE-2023-31982

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capturepacketreasmip at /src/capture.c...

Irontec Sngrep 缓冲区错误漏洞

Irontec Sngrep is a tool from Irontec for displaying SIP call message streams from endpoints. A security vulnerability exists in Irontec Sngrep version v1.6.0, which stems from the function packetsetpayload in /src/packet.c containing a stack buffer overflow...

PT-2023-23553 · Sngrep +1 · Sngrep +1

Name of the Vulnerable Software and Affected Versions: Sngrep version 1.6.0 Description: A stack buffer overflow issue was discovered in the function packet set payload at /src/packet.c. This issue affects the packet set payload function, which is located in the /src/packet.c file. Recommendation...

PT-2023-22234 · Unknown · Warpinator

Name of the Vulnerable Software and Affected Versions: Warpinator versions prior to 1.6.0 Description: The issue allows remote file deletion via directory traversal in top dir basenames. This could enable an attacker to delete arbitrary files on the recipient's computer. The vulnerability has bee...

CVE-2023-2294

A vulnerability was found in UCMS 1.6.0. It has been classified as problematic. This affects an unknown part of the file saddpost.php of the component Column Configuration. The manipulation of the argument strorder leads to cross site scripting. It is possible to initiate the attack remotely. The...

PT-2023-18783 · Ucms · Ucms

Name of the Vulnerable Software and Affected Versions: UCMS version 1.6.0 Description: A problematic issue was found in the file saddpost.php of the component Column Configuration. The manipulation of the strorder argument leads to cross-site scripting. It is possible to initiate the attack...

PT-2023-12929 · Tooljet · Tooljet

Name of the Vulnerable Software and Affected Versions: ToolJet version 1.6.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment Body component. Recommendations: For ToolJet version 1.6.0, consider...

ToolJet 跨站脚本漏洞

ToolJet is an extensible low-code framework for building business applications from ToolJet. A security vulnerability exists in ToolJet version v1.6.0. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload...

PT-2023-18601 · Suse · Kubewarden-Controller

Name of the Vulnerable Software and Affected Versions: SUSE kubewarden kubewarden-controller versions prior to 1.6.0 Description: An Improper Privilege Management issue allows attackers to read arbitrary secrets if they gain access to the ServiceAccount kubewarden-controller. Recommendations: For...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version v1.6.0-639, which stems from an out-of-memory issue in the mp4info component...