CVE-2023-30854 WWBN AVideo vulnerable to OS Command Injection

AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint /plugin/CloneSite/cloneClient.json.php allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4...

CVE-2023-30854

WWBN AVideo (open-source video platform) has a documented OS command-injection vulnerability in the authenticated endpoint /plugin/CloneSite/cloneClient.json.php. Attackers can achieve Remote Code Execution via this endpoint, with the issue fixed in version 12.4 per CVE-2023-30854. Red Hat adviso...

CVE-2023-30854 WWBN AVideo vulnerable to OS Command Injection

AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint /plugin/CloneSite/cloneClient.json.php allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4...

CVE-2023-25314

Cross Site Scripting XSS vulnerability in World Wide Broadcast Network AVideo before 12.4, allows attackers to gain sensitive information via the success parameter to /user...

SUSE CVE-2019-18453

An issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add comments via email feature. It has Insecure Permissions...

XWiki Platform 安全漏洞

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the French company XWiki. A security vulnerability exists in XWiki Platform xwiki-platform-user-profile-ui version 12.4 and later. An attacker could exploit this vulnerability to enable or disable any use...

Apple macOS Monterey 安全漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey version 12.4 that stems from a sandboxed process that can bypass sandboxing restrictions...

CVE-2022-2270

An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all versions starting from 15.1 before 15.1.1. GitLab was leaking Conan packages names due to incorrect permissions verification...

CVE-2022-26750

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges...

Apple macOS Monterey 信息泄露漏洞

Apple macOS Monterey is the 18th major version of Apple's macOS for the Macintosh desktop operating system. An information disclosure vulnerability exists in Apple macOS Monterey, which can be exploited by remote attackers to access sensitive information. The following products and versions are...

PT-2022-38204

Name of the Vulnerable Software and Affected Versions macOS Monterey versions prior to 12.4 Description An issue with state handling allows a person with physical access to a Mac to bypass the Login Window. Recommendations Update to macOS Monterey 12.4...

GitLab 12.4.x < 14.5.4, 14.6.x < 14.6.4, 14.7.x < 14.7.1 Improper Access Control Vulnerability

GitLab is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

Authorization

Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attacker to access a user's custom project and group templates...

CVE-2020-26407

A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site scripting to other users via importing a malicious project...

PostgreSQL < 9.5.23, 9.6.x < 9.6.19, 10.x < 10.14, 11.x < 11.9, 12.x < 12.4 Search Path Vulnerability - Linux

PostgreSQL is prone to an uncontrolled search path element vulnerability in CREATE EXTENSION. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

OPENSUSE-SU-2020:1244-1 Security update for postgresql12

This update for postgresql12 fixes the following issues: - update to 12.4: CVE-2020-14349, bsc1175193: Set a secure searchpath in logical replication walsenders and apply workers CVE-2020-14350, bsc1175194: Make contrib modules' installation scripts more secure...

Security fix for the ALT Linux 8 package postgresql12 version 12.4-alt0.M80P.1

12.4-alt0.M80P.1 built Aug. 20, 2020 Alexei Takaseev in task 256188 Aug. 12, 2020 Alexei Takaseev - 12.4 Fixes CVE-2020-14349, CVE-2020-14350...

SUSE SLED15 / SLES15 Security Update : postgresql12 (SUSE-SU-2020:2271-1)

This update for postgresql12 fixes the following issues : update to 12.4 : - CVE-2020-14349, bsc1175193: Set a secure searchpath in logical replication walsenders and apply workers - CVE-2020-14350, bsc1175194: Make contrib modules' installation scripts more secure. -...

Security fix for the ALT Linux 9 package postgresql12 version 12.4-alt1

12.4-alt1 built Aug. 18, 2020 Alexei Takaseev in task 256187 Aug. 12, 2020 Alexei Takaseev - 12.4 Fixes CVE-2020-14349, CVE-2020-14350...

CVE-2020-7976

GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control...