Intel Distribution for Python 安全漏洞

Intel Distribution for Python is a Python distribution from Intel Corporation USA optimized for Intel hardware. A security vulnerability exists in Intel Distribution for Python versions prior to 2024.2, which stems from incorrect default permissions. An attacker can exploit the vulnerability to...

Intel PROSet/Wireless Software 输入验证错误漏洞

Intel PROSet/Wireless Software is a wireless network card driver from Intel Corporation USA. An input validation error vulnerability exists in Intel PROSet/Wireless Software versions prior to 23.60, which stems from improper input validation. An attacker could cause a denial of service by...

Drupal Tooltip module < 1.1.2 - Authenticated Cross Site Scripting (XSS) vulnerability

Authenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff in WordPress Module Tooltip versions 1.1.2...

AZL-52441 CVE-2024-50103 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asocqcomlpasscpuplatformprobe A devmkzalloc in asocqcomlpasscpuplatformprobe could possibly return NULL pointer. NULL Pointer Dereference may be triggerred without addtional check. Add a NULL...

OctoPrint 安全漏洞

OctoPrint is an open source application from OctoPrint. Provides a fast web interface for controlling consumer 3D printers. A security vulnerability exists in OctoPrint version 1.10.2 and prior versions. An attacker exploiting this vulnerability could retrieve or modify sensitive configuration...

WordPress plugin All Post Contact Form 代码问题漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

SUSE CVE-2024-8996

Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...

PT-2024-32519

Name of the Vulnerable Software and Affected Versions Templately versions prior to 3.1.3 Description The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations For versions prior to 3.1.3, update to version...

pb-cms 跨站脚本漏洞

pb-cms waterfall content management system is a content management system by LinZhaoguan personal developer. A cross-site scripting vulnerability exists in pb-cms versions prior to 2.0.1, which stems from the component Permission Management Page's file /adminpermissions that can lead to cross-sit...

Asio 安全漏洞

Asio is a freely available, open source, cross-platform C++ library for network programming by chriskohlhoff individual developers. A security vulnerability exists in versions prior to Asio 1.13.0 that stems from a missing fallback error code and no associated error message from the SSL library...

CVE-2024-50438

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Andy Moyle Church Admin allows Reflected XSS.This issue affects Church Admin: from n/a before 5.0.0...

UBUNTU-CVE-2024-49767

Werkzeug is a Web Server Gateway Interface web application library. Applications using werkzeug.formparser.MultiPartParser corresponding to a version of Werkzeug prior to 3.0.6 to parse multipart/form-data requests e.g. all flask applications are vulnerable to a relatively simple but effective...

ZimaOS 安全漏洞

ZimaOS is an open source operating system project from IceWhaleTech that aims to provide a lightweight, high-performance, secure operating system environment. A security vulnerability exists in ZimaOS prior to version 1.2.4, which stems from the API endpoint /v21/file in ZimaOS being vulnerable t...

PT-2024-33901

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-rc3+ Description: The issue is related to the uprobe functionality in the Linux kernel, which can lead to out-of-bounds memory access when fetching arguments. This occurs because the percpu buffer used by...

PT-2024-33178 · Unknown · Dcme-320-L

Name of the Vulnerable Software and Affected Versions: DCME-320-L versions prior to 9.3.2.114 Description: The issue allows a remote attacker to execute arbitrary code via the log u umount.php component. Recommendations: For versions prior to 9.3.2.114, update to a version that contains a fix for...

OneDev 信息泄露漏洞

OneDev is a JAVA-based all-in-one DevOps platform from the Theonedev team. The platform supports container build, orchestration, CI, Git management, team collaboration and other features to help developers build a simple, powerful development platform. A security vulnerability exists in versions...

CVE-2024-49392

Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

WordPress plugin Classic Editor and Classic Widgets SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

CVE-2024-9061

The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wpajaxnoprivshortcodeApiAdd AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an action tha...

WordPress plugin IP Loc8 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...