CVE-2024-0420

The MapPress Maps for WordPress plugin before 2.88.15 does not sanitize and escape the map title when outputting it back in the admin dashboard, allowing Contributors and above roles to perform Stored Cross-Site Scripting attacks...

PT-2024-3872 · Sap · Sap Companion

Name of the Vulnerable Software and Affected Versions: SAP Companion versions prior to 3.1.38 Description: The issue is related to a URL with a parameter that could be vulnerable to an XSS attack. An attacker could send a malicious link to a user, potentially allowing the attacker to retrieve...

QAnything Security Breach

NetEase QAnything is a local knowledgebase Q&A system from NetEase that supports any file or database format, and can be installed and used offline. A security vulnerability exists in QAnything versions prior to 1.2.0, which stems from a security flaw in the component...

Envoy Security Vulnerabilities

Envoy is an open source distributed proxy server. A security vulnerability exists in Envoy versions prior to 1.29.1, which originates from a denial of service that occurs when using an address type that is not supported by the operating system...

SUSE CVE-2020-36773

Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c for txtwrite because a single character code in a PDF document can map to more than one Unicode code point e.g., for a ligature...

eCharge Hardy Barth eCharge Ladestation Security Breach

eCharge Hardy Barth eCharge Ladestation is a charging station. A security vulnerability exists in eCharge Hardy Barth eCharge Ladestation version v1.87.0 and prior versions. A remote attacker could exploit this vulnerability to execute arbitrary commands on the system via specially crafted...

AZL-34207 CVE-2023-52425 affecting package expat for versions less than 2.6.2-2

libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple buffer fills are needed...

Bref Resource Management Error Vulnerability

Bref is an open source project by Matthieu Napoli Individual Developer that helps you go serverless on AWS using PHP. A resource management error vulnerability exists in versions prior to Bref 2.1.13 that stems from not deleting temporary files after processing a request...

PT-2024-19101 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 OpenHarmony version 4.0.0 Description: The issue allows a local attacker to cause a denial of service through improper input. Recommendations: For OpenHarmony versions prior to 4.0.0, update to version 4.0....

openBI 访问控制错误漏洞

openBI is a big data visualization solution from openBI, Inc. An access control error vulnerability exists in openBI prior to version 1.0.8, which stems from a problem with the dlfile function in the /application/index/controller/Screen.php file that could lead to incorrect access control...

CVE-2024-1061

The 'HTML5 Video Player' WordPress Plugin, version 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in the 'getview' function...

Splunk Security Breach

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

AZL-34095 CVE-2023-40549 affecting package shim-unsigned-x64 for versions less than 15.8-1

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service...

CVE-2024-23614

A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root...

CVE-2023-33759

SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentication via a brute force attack...

CVE-2023-50785

Zoho ManageEngine ADAudit Plus before 7270 allows admin users to view names of arbitrary directories via path traversal...

UBUNTU-CVE-2023-51886

Buffer Overflow vulnerability in the main function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath...

WordPress plugin Product Import Export for WooCommerce Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

Label Studio Cross-Site Scripting Vulnerability

Label Studio is an open source data labeling tool from Heartex Open Source. Allows you to use a simple and clear UI mark audio, text, images, video and time series and other data types , and exported to a variety of model formats. A cross-site scripting vulnerability exists in Label Studio versio...

blitiri chasquid security breach

blitiri chasquid is an SMTP email server from blitiri. A security vulnerability exists in blitiri chasquid versions prior to 1.13, which stems from allowing SMTP smuggling...