143 matches found
PT-2024-28538
Name of the Vulnerable Software and Affected Versions Dell PowerScale InsightIQ versions 5.0 through 5.1 Description The issue is related to an Improper Access Control vulnerability. A high-privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...
PT-2024-25269 · Espressif · Esp-Idf
Name of the Vulnerable Software and Affected Versions: esp-idf version 5.1 Description: A Buffer Overflow issue allows a remote attacker to obtain sensitive information via the externalId component. Recommendations: For esp-idf version 5.1, at the moment, there is no information about a newer...
Team Johnlong software Raiden MAILD Mail Server 安全漏洞
Team Johnlong software Raiden MAILD Mail Server is a mail server software from China Murong Information Team Johnlong software. A security vulnerability exists in Team Johnlong software Raiden MAILD Mail Server version 5.01 and earlier, which stems from a relative path traversal vulnerability tha...
PT-2024-28632 · Microsoft +1 · Asp.Net Core +1
Name of the Vulnerable Software and Affected Versions: Duende IdentityServer versions 5.1 and earlier Duende IdentityServer versions 6.0 through 6.0.4 Duende IdentityServer versions 6.1 through 6.1.7 Duende IdentityServer versions 6.2 through 6.2.4 Duende IdentityServer versions 6.3 through 6.3.9...
TerraMaster TOS Security Vulnerability
TerraMaster TOS is a Linux-based operating system from China's TerraMaster Corporation TerraMaster that is dedicated to the TerraMaster Cloud Storage NAS server. A security vulnerability exists in TerraMaster TOS version 5.1 and prior versions, which stems from the use of hard-coded credentials. ...
WordPress ElasticPress plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ElasticPress versions = 5.1.1...
PT-2024-25270
Name of the Vulnerable Software and Affected Versions esp-idf version 5.1 Description A Buffer Overflow issue in the Bluetooth stack component allows a remote attacker to execute arbitrary code via a crafted script. Recommendations For esp-idf version 5.1, at the moment, there is no information...
CVE-2024-32358
An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...
ADiTaaS Authorization Issues Vulnerabilities
ADiTaaS is a service management platform from ADiTaaS, Inc. A security vulnerability exists in ADiTaaS version 5.1 that stems from the presence of an incorrect authentication vulnerability. A remote attacker could exploit the vulnerability by sending a specially crafted HTTP request to gain full...
PT-2023-32685 · Aditaas · Aditaas
Name of the Vulnerable Software and Affected Versions: ADiTaaS version 5.1 Description: A vulnerability exists in the ADiTaaS backend API due to improper authentication. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerabl...
CVE-2023-50369
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alma Alma – Pay in installments or later for WooCommerce allows Stored XSS.This issue affects Alma – Pay in installments or later for WooCommerce: from n/a through 5.1.3...
CVE-2023-39547
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command...
PT-2023-27014 · Unknown · Clusterpro X +3
Name of the Vulnerable Software and Affected Versions: CLUSTERPRO X versions 5.1 and earlier EXPRESSCLUSTER X versions 5.1 and earlier CLUSTERPRO X SingleServerSafe versions 5.1 and earlier EXPRESSCLUSTER X SingleServerSafe versions 5.1 and earlier Description: The issue allows an attacker to log...
NEC Expresscluster X Security Vulnerability
NEC Expresscluster X is a specialized high availability cluster software from Nippon Electric NEC. It is used to initiate a quick restore function and continuously protect critical applications and data. A security vulnerability exists in NEC Expresscluster X version 5.1 and prior versions that...
CVE-2023-40215
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Demonisblack demon image annotation allows SQL Injection.This issue affects demon image annotation: from n/a through 5.1...
JBL soundbar multibeam 信任管理问题漏洞
JBL soundbar multibeam is a bar speaker from JBL. A security vulnerability exists in JBL soundbar multibeam version 5.1 that stems from the use of hard-coded credentials...
WordPress Plugin Snow Monkey Forms 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in...
CVE-2022-48332
Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys filenamelen integer overflow and resultant buffer overflow...