CVE-2023-34116

Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access...

PT-2023-5196 · Zoom · Zoom Desktop Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.15.0 Description: The issue is related to improper input validation, which may allow an unauthorized user to enable an escalation of privilege via network access. This could potentially be...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms prior to version 5.14.5 that stems from improper privilege management. It...

WordPress plugin Float menu 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

gnuplot 安全漏洞

gnuplot is an interactive command-line tool that allows users to convert data and data functions into easy-to-see flat or three-dimensional graphics by entering commands. A security vulnerability exists in gnuplot v5.5, which contains a buffer overflow via the plotrequest function...

PT-2023-7544 · Asus · Asus Armoury Crate +1

Name of the Vulnerable Software and Affected Versions: Asus Armoury Crate version 5.3.4.0 SetupAsusServices version 1.0.5.1 Description: The issue is related to an unquoted service path vulnerability in the SetupAsusServices module of Asus Armoury Crate. This vulnerability allows local users to...

PT-2023-22218 · Bosch · Bosch Building Integration System

Name of the Vulnerable Software and Affected Versions: Bosch Building Integration System BIS version 5.0 Description: The issue is related to improper information in the cybersecurity guidebook of the Bosch Building Integration System, which may lead to incorrect configuration. This incorrect...

WordPress Plugin Snow Monkey Forms 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in...

CVE-2020-23065

Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attacker to execute arbitrary code via the video-js.swf...

CVE-2022-48333

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys prefixlen+featurenamelen integer overflow and resultant buffer overflow...

CVE-2022-48332

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys filenamelen integer overflow and resultant buffer overflow...

TP-LINK TL-WR940N 缓冲区错误漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WR940N that stems from a buffer out-of-bounds read issue in the component VirtualServerRPM, which can be exploited by an attacker to cause a denial of service DoS by constructing a...

CVE-2023-27429

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Automattic - Jetpack CRM team Jetpack CRM plugin = 5.4.4 versions...

Broadleaf Commerce 跨站脚本漏洞

Broadleaf Commerce is a Java open source e-commerce website framework from the Broadleaf Commerce team. A security vulnerability exists in Broadleaf Commerce versions 5.x and 6.x, which stems from cross-site scripting XSS in email address registration...

CVE-2020-21486

SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the userlist function in framerwork/phpokcall.php file...

PHPMyWind SQL注入漏洞

PHPMyWind is a set of PHP and MySQL-based and W3C-compliant enterprise website building solutions. A SQL injection vulnerability exists in PHPMyWind v.5.6, which can be exploited by remote attackers to execute arbitrary code via the id variable in the modify function...

Proofpoint Threat Response 跨站脚本漏洞

Proofpoint Threat Response is Proofpoint's leading Security Orchestration, Automation and Response SOAR solution that enables security teams to respond faster and more effectively to the evolving threat landscape. A security vulnerability exists in Proofpoint Threat Response versions prior to...

Vulnerabilities fixed in Zoom

Zoom has fixed vulnerabilities in the Zoom client for Windows and macOS. A malicious party could exploit the vulnerabilities to cause a denial-of-service, to grant themselves elevated privileges granted or gain access to sensitive information. Zoom has released updates to fix the vulnerabilities ...

Zoom Client 缓冲区错误漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom for Windows clients prior to version 5.14.0, which stems from an incorrect operation limit in the memory buffer...

PT-2023-24770 · Unknown +2 · Doorkeeper +2

Name of the Vulnerable Software and Affected Versions: Doorkeeper versions prior to 5.6.6 Description: The issue concerns Doorkeeper, an OAuth 2 provider for Ruby on Rails and Grape, which automatically processes authorization requests without user consent for public clients that have been...