4344 matches found
In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3 the wrapper scripts do not properly parse command lines.
...
PT-2023-28779 · Zpe Systems · Nodegrid Os
Name of the Vulnerable Software and Affected Versions: ZPE Systems, Inc Nodegrid OS versions 5.0.0 through 5.0.17 ZPE Systems, Inc Nodegrid OS versions 5.2.0 through 5.2.19 ZPE Systems, Inc Nodegrid OS versions 5.4.0 through 5.4.16 ZPE Systems, Inc Nodegrid OS versions 5.6.0 through 5.6.13 ZPE...
CVE-2023-43322
ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/...
Microsoft Edge Resource Management Error Vulnerability
Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A resource management error vulnerability exists in Microsoft Edge versions 79.0.309.71 through 118.0.2088.69, which stems from a boundary error when processing PDF files, allowing remote...
@0xtfm/widget-ibc (>=0.0.8-alpha.0, <=0.0.8-alpha.5), @1kdanny/n8n-nodes-firecrawl (>=1.0.0, <=1.0.2) +1509 more potentially affected by CVE-2023-46233 via crypto-js (>=4.0.0, <=4.1.1)
crypto-js NPM version =4.0.0, =0.0.8-alpha.0, =1.0.0, =3.0.0, =4.22.0, =1.0.0-alpha.0, =1.0.0-alpha.1, =1.1.56, =6.0.5, =0.1.1, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =6.0.2...
PT-2023-6653 · Elastic · Agent +2
Name of the Vulnerable Software and Affected Versions: Elastic Endpoint versions 7.9.0 through 8.10.3 Description: The issue is related to insufficient protection of registration data in Elastic Endpoint, which can allow a remote attacker to disclose protected information. When Elastic Endpoint i...
Liferay Portal and Liferay DXP Cross-Site Scripting Vulnerabilities
Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...
Apache InLong code issue vulnerabilities
Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. A code issue vulnerability exists in Apache InLong versions 1.4.0 to 1.8.0, which stems from the fact that some sensitive parameter...
Grafana Security Vulnerabilities
Grafana is Grafana open source set of open source monitoring tools that provide a visual monitoring interface . The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus. A security vulnerability exists in Grafana versions 0.9.0 through 1.2.2 that stems from not properly...
CVE-2023-39999
Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6.11, from 5.5 through 5.5.12, from 5.4...
mariadb: server crash in st_select_lex_unit::exclude_level
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel...
Exploit for Improper Input Validation in Atlassian Confluence_Data_Center
CVE-2023-22515 Exploit Script Affected Versions 8.0.0...
CVE-2023-36549
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2022-22447
IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...
123-x-ed-eied (>=1.0.5, <=1.0.6), 1k-tasks (>=2.3.0, <=3.6.1) +5850 more potentially affected by CVE-2023-44270 via postcss (>=8.0.0, <=8.4.30)
postcss NPM version =8.0.0, =1.0.5, =2.3.0, =1.0.0, =0.0.14, =1.0.51, =0.0.23-alpha.5, =0.3.27, =1.6.1, =0.3.0, =0.0.2, =0.0.1, =0.14.3 and more Source cves: CVE-2023-44270 Source advisory: OSV:GHSA-7FH5-64P2-3V2J...
UBUNTU-CVE-2023-3979
An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible that upstream members to collaborate with you on your branch get permission to write to the...
GitLab Security Breach
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab that stems from a deleted project...
Synapse Security Breach
synapse is an application for open federated instant messaging and VoIP A security vulnerability exists in Synapse that stems from the temporary storage of plaintext passwords during password changes. Affected products and versions; Synapse versions prior to 1.66.0 through 1.93.0...
WordPress Plugin Welcart e-Commerce SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...