CampCodes Employee Management System 注入漏洞

CampCodes Employee Management System is an employee management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Employee Management System version 1.0, which is caused by an incorrect manipulation of the mailuid parameter in the file /process/eprocess.php, resulti...

WordPress plugin Simple Payment 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from unchecked kzalloc and devmkzalloc return values, which could lead to a null pointer dereference...

Fuji Electric V-SFT 缓冲区错误漏洞

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates in the settemptypedefault function in VS6MemInIF, which can be exploited by an attacker to cause a crash, information disclosure, and...

Proofpoint Enterprise Protection 安全漏洞

Proofpoint Enterprise Protection is an application from Proofpoint USA, Inc. provides functionality to protect e-mail. A security vulnerability exists in Proofpoint Enterprise Protection versions prior to 8.22.0 that stems from improper input validation in Attachment Defense, which could result i...

WordPress plugin Landing Page Cat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exist...

WordPress plugin Saso Serial Codes Generator and Validator with WooCommerce Support 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fscache component using waitonbit to wait for a volume to be released, but suffers from a wait queue...

WordPress plugin Export and Import Users and Customers 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPress...

Fortinet FortiNDR 跨站请求伪造漏洞

Fortinet FortiNDR is a network detection and response solution from Fortinet, Inc. A cross-site request forgery vulnerability exists in Fortinet FortiNDR, which stems from a cross-site request forgery that could lead to the execution of an unauthorized operation. The following versions are...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the dmamask and dmaparms of the device object in the vmbusdeviceregister function not being properly...

Intel Advisor 代码问题漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation USA. A code issue vulnerability exists in Intel Advisor versions prior to 2024.2 that stems from the presence of an uncontrolled search path that could allow an authenticated user to potentiall...

Adobe Commerce 访问控制错误漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

AutomationDirect C-More EA9 Programming Software 缓冲区错误漏洞

AutomationDirect C-More EA9 Programming Software is a programming software from AutomationDirect, Inc. AutomationDirect C-More EA9 Programming Software suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data when parsing an EAP9 file, resulting ...

Suricata 安全漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security vulnerability exists in Suricata versions prior to 7.0.8 that stems from the fact that TCP streams with TCP emergency data out-of-band data may cause Suricata to analyze the data differently th...

WordPress plugin BookingPress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. The WordPress plugi...

WordPress plugin Element Pack Elementor Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal version 10.0.X prior to 10.2.10, which stems from the presence of an allowed file manipulation vulnerability...

Citrix Systems NetScaler Gateway和NetScaler ADC 缓冲区错误漏洞

Citrix Systems NetScaler Gateway Citrix Systems Gateway and Citrix Systems NetScaler ADC are both products of Citrix Systems, Inc.Citrix Systems NetScaler Gateway is a secure remote access solution. The solution provides administrators with application-level and data-level controls to enable user...

WordPress plugin Advanced Custom Fields PRO 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Jamf Pro 安全漏洞

Jamf Pro is an Apple device management solution from Jamf USA. A security vulnerability exists in Jamf Pro that stems from a flaw in the Jamf Remote Assist tool that allows a local, unprivileged user to elevate their privileges to root privileges on MacOS systems...

WordPress plugin Checkout Field Editor for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Entrust Instant Financial Issuance 安全漏洞

Entrust Instant Financial Issuance Entrust Cardwizard is an instant financial card issuance solution from Entrust Corporation, USA. A security vulnerability exists in Entrust Instant Financial Issuance that stems from the configuration file WebAPI.cfg.xml left behind after installation without...

WordPress plugin Community by PeepSo – Social Network, Membership, Registration, User Profiles 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin...

Beckhoff TwinCAT/BSD 安全漏洞

Beckhoff TwinCAT/BSD is a new operating system from Beckhoff. A security vulnerability exists in Beckhoff TwinCAT/BSD, which stems from an MPD package that allows an authenticated, low-privileged local attacker to induce a denial of service state in the daemon via a carefully constructed HTTP...

Flowise 安全漏洞

Flowise is a FlowiseAI open source tool for easily building LLM applications. A security vulnerability exists in Flowise version 1.8.2. An attacker exploited the vulnerability to access the API endpoint as an administrator...

Docusign API 安全漏洞

The Docusign API is a secure and extensible API from Docusign. A security vulnerability exists in Docusign API version 8.142.14. An attacker has exploited this vulnerability to cause the Docusign account to be completely compromised...

WordPress plugin Smush security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in...

Actual Analyzer Security Vulnerability

Actual Analyzer is a PHP tool for monitoring website traffic from Actual Analyzer, Inc. A security vulnerability exists in Actual Analyzer that stems from the use of untrusted input for some of the input data passed to the eval operation, which allows code execution via shell metacharacters...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the incorrect use of portid by the ASoC:codecs:wcd938x module...

WordPress plugin Divi security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin The Plus Addons for Elementor Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

LG Simple Editor 安全漏洞

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an XML External Entity Handling vulnerability due to an improper restriction on XML External Entity XXE references, where a...

D-Link DAP-1325 安全漏洞

D-Link DAP-1325 is a wireless network extender made by D-Link, which is mainly used to extend the wireless network coverage, support the conversion of wired network and wireless network or connect to different wireless networks. The D-Link DAP-1325 suffers from a command injection remote code...

D-Link DIR-X3260 安全漏洞

D-Link DIR-X3260 is a Wi-Fi 6 router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-X3260 that stems from a prog.cgi SetTriggerPPPoEValidate stack-based buffer overflow remote code execution vulnerability...

Adtran SR400ac 安全漏洞

The Adtran SR400ac is a router from the US-based Adtran Corporation. A security vulnerability exists in the Adtran SR400ac that stems from the presence of a ping command injection remote code execution vulnerability, which can be exploited by an attacker to execute code in a root context...

Znuny和Znuny LTS 安全漏洞

Znuny is a work order system from Znuny, Inc. A security vulnerability exists in Znuny and Znuny LTS that stems from the presence of a path traversal vulnerability. An attacker could exploit the vulnerability to upload a file to an arbitrary writable location. Affected products and versions: Znun...

Xpdf 缓冲区错误漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf versions 4.05 and earlier, which stems from a vulnerability that allows an attacker to trigger an out-of-bounds array write...

WordPress Plugin Wholesale for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in...

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

Apache Zeppelin 跨站请求伪造漏洞

Apache Zeppelin is an open source web-based laptop application from the Apache USA Foundation. The program supports interactive data analysis and collaborative documentation. A cross-site request forgery vulnerability exists in Apache Zeppelin version 0.9.0 and earlier, which stems from a...

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...

WordPress Plugin Avada 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...

Microsoft Xbox Gaming Services 安全漏洞

Microsoft Xbox Gaming Services is an Xbox-related gaming service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Xbox Gaming Services that stems from the presence of an elevation of privilege vulnerability...

AMSS++ Security Vulnerability

AMSS++ is a tool for office management support systems from Amssplus. A security vulnerability exists in AMSS++ version 4.31, which stems from an SQL injection vulnerability in multiple parameters of the /amssplus/modules/book/main/bookdetailgroup.php page...

Adobe Premiere Pro 缓冲区错误漏洞

Adobe Premiere Pro is a set of non-linear editing video editing software from the American company Audobee Adobe. Adobe Premiere Pro suffers from an out-of-bounds write vulnerability vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the context of the...

Brivo Access Control Systems Security Breach

Brivo Access Control Systems Brivo ACS is a family of access control systems from Brivo USA. Providing comprehensive visibility, data-driven insight, access control and open integration to improve secure operations. A security vulnerability exists in Brivo Access Control Systems versions 5.2.4...

RRJ Nueva Ecija Engineer Online Portal Security Vulnerability

RRJ Nueva Ecija Engineer Online Portal is an online portal for engineers from RRJ Nueva Ecija. A security vulnerability exists in RRJ Nueva Ecija Engineer Online Portal version 1.0, which originates in the file /admin/uploads/ can lead to the exposure of file and directory information...

WordPress Plugin Corsa Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

Fortinet FortiVoice Security Vulnerability

Fortinet FortiSwitch and others are products of Fortinet, Inc. FortiSwitch is a switch product and Fortinet FortiVoice is a product of tine and others are products of tine, Inc. tine is a team collaboration software. A security vulnerability exists in Fortinet FortiVoiceEnterprise, FortiSwitch,...