CVE-2023-23992

Cross-Site Request Forgery CSRF vulnerability in AutomatorWP plugin = 2.5.0 leads to object delete...

TCG TPM 缓冲区错误漏洞

TCG TPM is a chip from the Trusted Computing Group that is planted inside a computer to provide a trusted root for the computer. A buffer error vulnerability exists in version 2.0 of the TCG TPM that stems from an out-of-bounds read issue. An attacker could use this vulnerability to read or acces...

CVE-2023-24253

Domotica Labs srl Ikon Server before v2.8.6 was discovered to contain a SQL injection vulnerability...

MuYuCMS 代码问题漏洞

MuYuCMS is MuYuCMS open source a lightweight open source content management system . MuYuCMS 2.2 version of the code problematic vulnerability , the vulnerability stems from the wrong operation of the parameter url leads to server-side request forgery...

MuYuCMS 路径遍历漏洞

MuYuCMS is MuYuCMS open source a lightweight open source content management system . MuYuCMS 2.2 version of a security vulnerability , the vulnerability stems from the wrong operation of the parameter dirpath leads to relative path traversal...

PT-2023-16712 · Muyucms · Muyucms

Name of the Vulnerable Software and Affected Versions: MuYuCMS version 2.2 Description: A vulnerability was found in MuYuCMS. It has been classified as problematic. The issue affects an unknown function of the file /editor/index.php. The manipulation of the dir path argument leads to relative pat...

URule 代码问题漏洞

URule is a pure Java rules engine by Gao Jie youseries individual developers. URule v2.1.7 version has a security vulnerability, the vulnerability stems from the existence of XML external entity XXE vulnerability, an attacker can be exploited to exploit the vulnerability by the carefully crafted...

http2-server: Invalid HTTP/2 requests cause DoS

A flaw was found in the Eclipse Jetty http2-server package. This flaw allows an attacker to cause a denial of service in the server via HTTP/2 requests...

PT-2023-20614 · WordPress · Buddyforms

Name of the Vulnerable Software and Affected Versions: BuddyForms WordPress plugin versions prior to 2.7.8 Description: The issue is related to an unauthenticated insecure deserialization problem. An attacker could exploit this to call files using a PHAR wrapper, which deserializes data and calls...

CVE-2023-26302

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

kernel: NFSD: Protect against send buffer overflow in NFSv2 READ

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffers into a single array of pages. This...

MongoDB 代码问题漏洞

MongoDB is a document-oriented database management system from the American company MongoDB. A code issue vulnerability exists in MongoDB .NET/C Driver version v2.18.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

PT-2023-2009 · Tp Link · Tp-Link Archer C50

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 version V2 160801 Description: A vulnerability in the Web Management Interface component of the TP-Link Archer C50 can be exploited to cause a denial of service. The issue is related to incorrect clearance or release of...

PT-2023-10346 · Meta4Creations · Meta4Creations Post Duplicator Plugin

Name of the Vulnerable Software and Affected Versions: meta4creations Post Duplicator Plugin version 2.18 Description: A vulnerability was found in the meta4creations Post Duplicator Plugin. It has been classified as problematic and affects the function mtphr post duplicator notice of the file...

CVE-2021-34164

Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location...

CVE-2023-23899

Cross-Site Request Forgery CSRF vulnerability in HasThemes Extensions For CF7 plugin = 2.0.8 versions leads to arbitrary plugin activation...

CLSA-2023-1676571549 Update of nss

Update to CKBI 2.60 from NSS 3.86 - Removed: - Certificate "Camerfirma Global Chambersign Root" - Certificate "Cybertrust Global Root" - Certificate "DST Root CA X3" - Certificate "EC-ACC" - Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Certificate "GlobalSign Root CA - R2" -...

CLSA-2023-1676571280 Update of ca-certificates

Update to CKBI 2.60 from NSS 3.86 - Removed: - Certificate "Camerfirma Global Chambersign Root" - Certificate "Cybertrust Global Root" - Certificate "DST Root CA X3" - Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Certificate "GlobalSign Root CA - R2" - Certificate "Staat der...

Intel ON Event Series 安全漏洞

Intel ON Event Series is a mobile application from Intel Corporation USA. A security vulnerability exists in Intel ON Event Series versions prior to 2.0 that stems from insufficiently protected credentials. An attacker could exploit the vulnerability to cause information disclosure...

Intel SGX SDK 安全漏洞

The Intel SGX SDK is a set of software development kits based on SGX Intel Software Security Extensions technology from Intel Corporation. A security vulnerability exists in Intel® SGX versions prior to 2.0 91ee496, which stems from the inclusion of improper access control in this Crypto API...