Cisco ISE and Cisco ISE-PIC injection vulnerabilities

Cisco ISE and Cisco ISE-PIC are both products of the U.S. Cisco Cisco.Cisco ISE is the identity services engine introduced by Cisco, mainly used for network access control and security management.Cisco ISE-PIC is the passive identity connector of the Cisco Identity Services Engine, which is mainl...

Libarchive input validation vulnerability

libarchive is a multi-format archive and compression library open-sourced by libarchive. An input validation error vulnerability exists in libarchive that stems from an integer overflow when processing WARC files, which could result in memory corruption or a denial of service...

phpList security vulnerabilities

phpList is a full-featured open source email marketing manager from phpList Open Source for creating, sending, integrating and analyzing email campaigns and newsletters. A security vulnerability exists in phpList version 3.6.3, which stems from an incorrect manipulation of the parameter id leadin...

Cisco IOS XE Operating System Command Injection Vulnerability

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. Cisco IOS XE suffers from an operating system command injection vulnerability that ste...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not cleaning up the cxlregion target, which could lead to a memory leak...

Siemens SENTRON 7KT PAC1260 Data Manager: Operating System Command Injection Vulnerability

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. The Siemens SENTRON 7KT PAC1260 Data Manager suffers from an OS command injection vulnerability that stems from not cleaning up the language parameter of a specific POST request,...

Django security vulnerabilities

Django is a set of open source web application frameworks based on the Python language from the Django Foundation. The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django versions prior to 5.1.7, 5.0.13, and 4.2.20, which...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the amtrcv function not releasing an incoming skb when a socket is not found, potentially leading to a memor...

Adobe Commerce Access Control Vulnerability

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

Microsoft SharePoint authorization issue vulnerability

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

WordPress plugin Crelly Slider has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

D-Link DIR-816 security vulnerabilities

The D-Link DIR-816A2 is a router from China's AUO D-Link. An information disclosure vulnerability exists in the D-Link DIR-816A2, which stems from insufficient protection of sensitive information in the component dstatus.asp, and can be exploited by an attacker to obtain sensitive information...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ivpubolist function of the accel/ivpu module not checking if ctx is NULL, which could lead to a general...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention condition issue when concurrently stopping garbage collection in the f2fs file system...

WordPress plugin WPLMS code issue vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code issue...

IBM InfoSphere Information Server and IBM InfoSphere DataStage Flow Designer security vulnerabilities

IBM InfoSphere Information Server and IBM InfoSphere DataStage Flow Designer are both products of International Business Machines IBM.IBM InfoSphere Information Server is a data integration platform. The platform can be used to integrate data information obtained from various sources.IBM InfoSphe...

WordPress Plugin Notibar has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

pnpm code issues and vulnerabilities

pnpm is a package manager in the pnpm open source. A code issue vulnerability exists in pnpm 9.14.4 and earlier versions, which stems from the presence of a vulnerability that improperly handles overrides and global caching, which can lead to arbitrary code being run in subsequent installations...

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by type confusion in V8. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Moodle security vulnerabilities

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that stems from a possible risk in local files when restoring block backups...

Symfony input validation vulnerability

Symfony is a PHP framework for web and console applications and a set of reusable PHP components from Symfony, Inc. An input validation error vulnerability exists in Symfony that stems from an attacker being able to trick an authenticator that relies on the Request class into redirecting the user...

Siemens InterMesh 7177 and Siemens InterMesh 7707 have access control vulnerability issues

InterMesh is a wireless alarm reporting system that uses mesh wireless network technology to transmit alarm signals. A security vulnerability exists in Siemens InterMesh Subscriber Devices due to a web server in the affected devices that does not authenticate a GET request that executes a specifi...

WordPress Plugin RSS Feed Widget Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

openSUSE Leap security vulnerabilities

openSUSE Leap is a new openSUSE build and a new hybrid Linux distribution from SUSE Germany. A security vulnerability exists in openSUSE Leap that stems from an attacker's ability to place special files into the actual package source, allowing the attacker to change the victim's osc configuration...

D-Link COVR-2600R security vulnerability

The D-Link COVR-2600R is a wireless router from China-based AUO D-Link. The D-Link COVR-2600R suffers from a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. No detailed vulnerability details are provided at this time...

Shilpi Client Dashboard security vulnerabilities

Shilpi Client Dashboard is a centralized dashboard from Shilpi. A security vulnerability exists in Shilpi Client Dashboard versions prior to 9.7.0, which stems from a lack of rate limiting and CAPTCHA protection for OTP requests in the API endpoints, and could lead to an OTP explosion on the targ...

Intel RAID Web Console Access Control Vulnerability

Intel Raid Web Console is a web-based, Intel Corporation USA application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. The Intel RAID Web Console is vulnerable to an access control error vulnerability that stems from the inclusion ...

WordPress Plugin Community by PeepSo – Social Networks, Membership, Registration, User Profiles Cross-site Script Vulnerability

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue in the sched/core component in dupusercpusptr...

WordPress plugin WHMpress has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin PowerPack for Beaver Builder has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Homebrew security vulnerabilities

Homebrew is a package manager in the Homebrew open source. A security vulnerability exists in Homebrew versions prior to 4.2.20, which stems from os/linux/elf.rb's use of ldd to load ELF files obtained from untrusted sources. An attacker can achieve code execution via an ELF file with a custom...

WordPress plugin Funnel Builder for WordPress by FunnelKit has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

SolarWinds Access Rights Manager Authorization Issue Vulnerability

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to gain domain administrator access...

Citrix Systems NetScaler Gateway and Citrix Systems NetScaler ADC Security Vulnerabilities

Citrix Systems NetScaler Gateway Citrix Systems Gateway and Citrix Systems NetScaler ADC are both products of Citrix Systems, Inc.Citrix Systems NetScaler Gateway is a secure remote access solution. The solution provides administrators with application-level and data-level controls to enable user...

Microsoft Windows MSHTML Platform Security Vulnerability

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and editions are affected:Windows Server 2012...

SeaCMS SQL Injection Vulnerability

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A SQL injection vulnerability exists in SeaCMS version 12.9, which stems from the fact that manipulation of the parameter cid using inpu...

Actual Analyzer Security Vulnerability

Actual Analyzer is a PHP tool for monitoring website traffic from Actual Analyzer, Inc. A security vulnerability exists in Actual Analyzer that stems from the use of untrusted input for some of the input data passed to the eval operation, which allows code execution via shell metacharacters...

WordPress plugin Aspose.Words Exporter security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Foxit Reader Trust Management Vulnerability

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A trust management issue vulnerability exists in Foxit Reader version 2024.2.0.25138, which stems from an elevation of privilege vulnerability. No details of the vulnerability are available at this time...

ansibleguy-webui security vulnerabilities

ansibleguy-webui is a coding library by the individual developers at AnsibleGuy in Austria. A security vulnerability exists in ansibleguy-webui versions prior to 0.0.21, which stems from the presence of a cross-site scripting XSS vulnerability...

Zammad security vulnerabilities

Zammad is a suite of ticket management software from the German company Zammad. A security vulnerability exists in Zammad versions prior to 6.3.1, which originates from a vulnerability that allows a local attacker to modify the gem file to inject arbitrary code into a process...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor announcements...

WordPress plugin Mesmerize Companion has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

HSC Cybersecurity HC Mailinspector Path Traversal Vulnerability

HSC Cybersecurity HC Mailinspector is a cloud email security solution from HSC Cybersecurity. A path traversal vulnerability exists in HSC Cybersecurity HC Mailinspector versions 5.2.17-3 through v.5.2.18, which stems from an unauthenticated path traversal vulnerability in /public/loader.php, whe...

aiohttp security vulnerabilities

aiohttp is an open source asynchronous HTTP client/server framework for asyncio and Python. A security vulnerability exists in aiohttp versions prior to 3.9.4, which results in a denial of service when attempting to parse a malformed POST request...

WordPress Plugin No-Bot Registration: Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

Microsoft OLE DB Provider for SQL Server security vulnerabilities

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...

WordPress Plugin Gutenberg Blocks by Kadence Blocks has a security vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Plugin Zotpress has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Zotpress is vulnerabl...