WordPress plugin IdeaPush 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Soledad theme <= 8.5.9 - Unauthenticated Limited Local File Inclusion vulnerability

Unauthenticated Limited Local File Inclusion vulnerability discovered by Foxyyy in WordPress Theme Soledad versions = 8.5.9...

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of buffer overflow due to a stack-based mechanism. This allows an attacker to execute arbitrary code.

The vulnerability of the HMI interface configuration software Monitouch V-SFT is related to the possibility of buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created V8 files...

Zulip 安全漏洞

Zulip is a powerful open source group chat application from Zulip, Inc. for combining the immediacy of real-time chat with the productivity benefits of threaded conversations. A security vulnerability exists in Zulip version 8.3 that stems from vulnerability to cross-site scripting XSS attacks...

CVE-2024-11797

Fuji Electric Monitouch V-SFT V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in tha...

PT-2024-9100 · Fuji Electric · Fuji Electric Monitouch V-Sft

Name of the Vulnerable Software and Affected Versions: Fuji Electric Monitouch V-SFT affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this...

PT-2024-9105 · Fuji Electric · Fuji Electric Monitouch V-Sft

Name of the Vulnerable Software and Affected Versions: Fuji Electric Monitouch V-SFT version V8 Description: The issue is a remote code execution vulnerability that allows attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. This is due to a lack of prop...

UBUNTU-CVE-2024-10921

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to...

Intel VROC 输入验证错误漏洞

Intel VROC is an application from Intel Corporation USA. An input validation error vulnerability exists in Intel VROC versions prior to 8.6.0.2003, which stems from incorrect input validation. An attacker exploiting this vulnerability could cause a denial of service on the system...

PT-2024-8712 · Siemens · Scalance Mum856-1 +13

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions V8.2 RUGGEDCOM RM1224 LTE4G NAM versions V8.2 SCALANCE M804PB versions V8.2 SCALANCE M812-1 ADSL-Router versions V8.2 SCALANCE M816-1 ADSL-Router versions V8.2 SCALANCE M826-2 SHDSL-Router versions V8.2...

Lingdang CRM 路径遍历漏洞

Lingdang CRM Lingdang CRM is a customer relationship management system from the Chinese company Lingdang Lingdang. A path traversal vulnerability exists in Lingdang CRM version 8.6.4.3 and earlier versions, which stems from the parameter url in the file /crm/data/pdf.php that can lead to path...

PT-2024-35098 · Mattermost +1 · Mattermost +1

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.2 Mattermost versions 10.0.x through 10.0.0 Description: The issue arises when searching for channel names in the channel switcher, allowing an attacker to obtain private channel names they are not a...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Access Control Error vulnerability that stems from a failure to properly query ElasticSearch when searching for a channel name in the channel switcher, which can be exploited...

PT-2024-33683

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.14.6 SuiteCRM versions prior to 8.7.1 Description: The issue arises from the way SuiteCRM checks PHP scripts against a blacklist of functions and methods to prevent the installation of malicious MLPs. However, thi...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass due to improper handling of SAS Uri durations in the CreateSASUrl function. Note: Users who didn't implement SAS Uri's are unaffected. Remediation Upgrade ICG.AspNetCore.Utilities.CloudStorage to version 8.0.0 or...

PT-2024-34162 · Unknown · Icg.Aspnetcore.Utilities.Cloudstorage

Name of the Vulnerable Software and Affected Versions: ICG.AspNetCore.Utilities.CloudStorage versions prior to 8.0.0 Description: The issue affects users of the ICG.AspNetCore.Utilities.CloudStorage library who set a duration for a SAS Uri with a value other than 1 hour, potentially resulting in ...

CVE-2024-50456

Missing Authorization vulnerability in The SEO Guys at SEOPress SEOPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEOPress: from n/a through 8.1.1...

Ubiquiti Networks UniFi Network Application 安全漏洞

Ubiquiti Networks UniFi Network Application is a network management software from Ubiquiti, Inc. that allows users to manage a variety of devices in a network including, but not limited to, wireless access points APs, switches, routers, etc. through a centralized interface. A security vulnerabili...

PT-2024-32880 · Intermesh · Intermesh 7177 Hybrid 2.0 Subscriber +1

Name of the Vulnerable Software and Affected Versions: InterMesh 7177 Hybrid 2.0 Subscriber versions prior to 8.2.12 InterMesh 7707 Fire Subscriber versions prior to 7.2.12 Description: A vulnerability has been identified that could allow an authenticated local attacker to execute arbitrary...

PT-2024-31423 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server version 8.5 Description: The issue is a denial of service vulnerability that can be triggered by an unexpected specially crafted request under certain configurations. A remote attacker could exploit this to...