CVE-2023-38256

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system...

PT-2023-27931 · Sap · S/4Hana

Name of the Vulnerable Software and Affected Versions: S4 HANA versions 102 through 107 Description: The OData service of the S4 HANA, specifically in the Manage checkbook apps, allows an attacker to change the checkbook name by simulating an update OData call. Recommendations: For versions 102...

HashiCorp Terraform Path Traversal Vulnerability

HashiCorp Terraform is an open source tool for provisioning and managing cloud infrastructure from HashiCorp, USA. A security vulnerability exists in Terraform versions 1.0.8 through 1.5.6, which stems from allowing arbitrary files to be written during an init operation...

PT-2023-23104 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex versions 4.0 through 4.4.2 IBM Aspera Faspex versions 5.0 through 5.0.5 Description: The issue allows a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. Recommendations: For IBM...

PT-2023-27825 · F-Revocrm · F-Revocrm

Name of the Vulnerable Software and Affected Versions: F-RevoCRM versions 7.3.0 through 7.3.7 Description: The issue is a cross-site scripting vulnerability. If exploited, it allows an arbitrary script to be executed on the web browser of the user using the product. Recommendations: For versions...

CVE-2023-39582

SQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged attacker to obtain sensitive information via the import sessions functions...

PT-2023-16858 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 4.1 through 16.1.4 GitLab versions 16.2 through 16.2.4 GitLab versions 16.3 through 16.3.0 Description: An issue has been discovered in GitLab where it was possible to create a URL that would redirect to a different project...

Security Bulletin: A vulnerability in Microsoft ASP.NET affects IBM Robotic Process Automation and may result in a denial of service (CVE-2022-29117)

Summary Microsoft ASP.NET is used by IBM Robotic Process Automation as part of the application framework. CVE-2022-29117 Vulnerability Details CVEID:CVE-2022-29117 DESCRIPTION: Microsoft ASP.NET and Visual Studio are vulnerable to a denial of service. By sending a specially-crafted request, a...

PT-2023-24637 · Unknown · Rakib Hasan Dynamic Qr Code Generator

Name of the Vulnerable Software and Affected Versions: Rakib Hasan Dynamic QR Code Generator plugin versions 0.0.0 through 0.0.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the...

VulnCheck KEV: CVE-2023-35708

In Progress MOVEit Transfer before 2021.0.8 13.0.8, 2021.1.6 13.1.6, 2022.0.6 14.0.6, 2022.1.7 14.1.7, and 2023.0.3 15.0.3, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...

@36node/template-service (>=0.17.6, <=0.17.9), @88bens/mongoose-multi (2.0.3) +562 more potentially affected by CVE-2021-32050 via mongodb (>=3.6.0, <=3.6.9)

mongodb NPM version =3.6.0, =0.17.6, =3.7.0, =1.0.0, =0.7.0, =2.1.0, =1.1.66, =2.9.8, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.2.0, =3.3.3 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...

Badaso 跨站脚本漏洞

Badaso is an open source Laravel Vue headless CMS from Uasoft. A security vulnerability exists in Badaso versions v.0.0.1 through v.2.9.7, which stems from a vulnerability that allows remote attackers to execute arbitrary code via a crafted payload on the rack number parameter in the add new rack...

PT-2023-26578 · Ibm · Ibm Storage Copy Data Management

Name of the Vulnerable Software and Affected Versions: IBM Storage Copy Data Management versions 2.2.0.0 through 2.2.19.0 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information...

IBM Storage Copy Data Management 加密问题漏洞

IBM Storage Copy Data Management is a data storage system from International Business Machines IBM. A security vulnerability exists in IBM Storage Copy Data Management versions 2.2.0.0 through 2.2.19.0 that stems from the use of an insufficiently strong encryption algorithm...

PT-2023-29399 · Gerbv +4 · Gerbv +4

Name of the Vulnerable Software and Affected Versions: Gerbv versions 2.4.0 through 2.10.0 Description: A user able to control file input to Gerbv can cause a crash and denial-of-service with a specially crafted Gerber RS-274X file. Recommendations: For Gerbv versions 2.4.0 through 2.10.0, update...

Rust 跨站脚本漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A cross-site scripting vulnerability exists in Rust versions prior to 1.60.0 through 1.72, which stems from a cross-site scripting XSS vulnerability due to not properly escaping the Cargo feature name...

PT-2023-23589

Name of the Vulnerable Software and Affected Versions Netmaker versions prior to 0.17.1 Netmaker versions 0.18.0 through 0.18.5 Description An Insecure Direct Object Reference IDOR vulnerability was found in the user update function, allowing an attacker to update another user's password by...

DEBIAN-CVE-2022-47011

An issue was discovered function parsestabstructfields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks...

UBUNTU-CVE-2022-45582

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...

PT-2023-27378 · Opennms · Opennms Horizon +1

Name of the Vulnerable Software and Affected Versions: OpenMNS Horizon versions 31.0.8 through 32.0.2 Meridian versions prior to 2023.1.5 Description: The issue allows any user with the ROLE FILESYSTEM EDITOR to easily escalate their privileges to ROLE ADMIN or any other role. The affected softwa...