8489 matches found
PT-2023-21019 · Jizhicms · Jizhicms
Name of the Vulnerable Software and Affected Versions: Jizhicms version 2.4.5 Description: An arbitrary file upload vulnerability in the CommonController.php component allows attackers to execute arbitrary code via a crafted phtml file. This issue is related to the admincCommonController.php...
dnsmasq 安全漏洞
dnsmasq is a lightweight DNS forwarding and DHCP and TFTP server written in C. It can be used to forward packets to and from the server. A security vulnerability exists in dnsmasq versions prior to 2.90, which stems from the EDNS.0 UDP packet size being set to 4096 when the actual size should be...
DEBIAN-CVE-2023-27585
PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...
ALPINE-CVE-2023-27585
PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...
WordPress Plugin WP CSV to Database 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2022-47166
Cross-Site Request Forgery CSRF vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder plugin = 2.1.1 versions...
bumsys SQL注入漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. unilogies bumsys version before v2.0.2 has a SQL injection vulnerability , the vulnerability stems from core/ajax/ajaxdata.php in the SQL injection...
WordPress plugin Void Contact Form 7 Widget For Elementor Page Builder 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
bumsys 安全漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. A security vulnerability exists in unilogies bumsys versions prior to v2.0.2, which stems from an improper restriction in the UI layer or framework in which the software is rendered...
Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
...
SUSE CVE-2019-14692
AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load in mkj.cpp...
CVE-2023-26922
SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shellexect parameter to the \www\pages\matrix-gui-2.0 endpoint...
CVE-2023-1267
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ulkem Company PtteM Kart.This issue affects PtteM Kart: before 2.1...
PT-2023-19995 · Loonflow · Loonflow
Name of the Vulnerable Software and Affected Versions: loonflow version r2.0.14 Description: A Server-Side Request Forgery SSRF issue allows attackers to force the application to make arbitrary requests via manipulation of the hook url parameter. This enables attackers to potentially access...
PT-2023-3361 · Tp Link · Tp-Link Tl-Wa7510N
Name of the Vulnerable Software and Affected Versions: TP-Link TL-WPA7510 EU version V2 190125 Description: The issue is related to a stack overflow via the operation parameter at the "/admin/locale" API endpoint. This can be exploited by a remote attacker to execute arbitrary commands. The...
CVE-2023-24763
In the module "Xen Forum" xenforum for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0...
FabulaTech USB for Remote Desktop 安全漏洞
Fabulatech FabulaTech USB for Remote Desktop is a USB device remote connection application from Fabulatech UK that supports redirection of USB devices plugged into the local computer to a remote computer. A security vulnerability exists in FabulaTech USB for Remote Desktop version 2.8.42. An...
The vulnerability of the spectre_v2_select_mitigation() function in the Linux operating system allows a hacker to execute arbitrary code.
The vulnerability of the spectrev2selectmitigation function in the Linux operating system is related to errors in Intel processors when processing the RET instruction after the termination of a virtual machine. Exploiting this vulnerability allows an attacker to execute arbitrary code...