Thaiger security vulnerabilities

Thaiger is a news application from Thaiger Thailand. A security vulnerability exists in Thaiger version 1.2 that originates from allowing unauthorized applications to cause a code execution attack by manipulating the SharedPreference file...

SQLite code injection vulnerability

SQLite is a lightweight database that is ACID compliant relational database management system. A code injection vulnerability exists in SQLite JDBC that stems from a remote code execution vulnerability. No detailed vulnerability details are provided at this time...

Mattermost security vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost. An attacker exploited the vulnerability to elevate privileges to system administrator privileges...

Netflix Lemur security feature vulnerability

Netflix Lemur is Netflix's tool for managing TLS credential creation. A security vulnerability exists in Netflix Lemur versions prior to 1.3.2, which stems from an insufficiently randomized value used when generating default credentials, and which could be exploited by an attacker to guess...

Microsoft Message Queuing security vulnerabilities

Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to remotely execute code. The following products and editions a...

UNISOC Chipsets security vulnerabilities

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking, which could lead to a local denial of service...

Delta Electronics InfraSuite Device Master command injection vulnerability

Delta Electronics InfraSuite Device Master is Delta Electronics' device for simplifying and automating critical equipment monitoring. A command injection vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.5, which can be exploited by an attacker to inject...

MGT-COMMERCE CloudPanel Trust Management Vulnerability

MGT-COMMERCE CloudPanel is a free solution from MGT-COMMERCE Open Source. It is designed to ease the burden of managing self-hosted Linux servers. A security vulnerability exists in MGT-COMMERCE CloudPanel version 2.2.0, which stems from the fact that the system comes with a static SSL certificat...

dot-lens security vulnerabilities

dot-lens is a JavaScript library. A security vulnerability exists in dot-lens that stems from prototype contamination of the set function in the index.js file...

Gogs operating system command injection vulnerability

Gogs Go Git Service is a Go-based self-service Git hosting service from the GOGS team that supports creating and migrating public/private repositories, adding and removing repository collaborators, and more. An operating system command injection vulnerability exists in Gogs versions prior to...

Moodle cross-site scripting vulnerabilities

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle, which stems from insufficient cleansing of user-supplied data in blog searches, and which ca...

Ricoh MP C4504ex security vulnerability

The Ricoh MP C4504ex is a printer from Ricoh Japan. A security vulnerability exists in the Ricoh MP C4504ex version 1.06, which stems from an incorrect processing credentials flow...

Microsoft PostScript Printer Driver security vulnerabilities

Microsoft PostScript Printer Driver is a Microsoft standard printer driver for PostScript printers from Microsoft.Microsoft PCL6 Class Printer Driver is a printer driver from Microsoft. Microsoft PCL6 Class Printer Driver is a printer driver software from Microsoft. A remote code execution...

WordPress plugin Simple URLs: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress plugin Wicked Folders has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. The WordPress plugin Wicked Folders suffers from a...

TYPO3 cross-site scripting vulnerabilities

TYPO3 is a free and open source content management system framework CMS/CMF from TYPO3 Association in Switzerland. A cross-site scripting vulnerability exists in TYPO3. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

RushBet cross-site scripting vulnerability

RushBet is a suite of betting sites from RushBet, Inc. A security vulnerability exists in RushBet version 2022.23.1-b490616d that stems from not properly validating incoming data. An attacker exploited the vulnerability to steal customer accounts through the use of a malicious application...

ruby-git security vulnerability

ruby-git is a Ruby library. It can be used to create, read, and manipulate Git repositories by wrapping system calls into git binaries. A security vulnerability exists in ruby-git v1.13.0 and earlier versions that could allow an authenticated, remote attacker to execute arbitrary ruby code by...

ZITADEL code issue vulnerabilities

ZITADEL is a modern open source alternative to Auth0, Firebase Auth, AWS Cognito, and Keycloak built for the container and serverless era, open sourced by ZITADEL Switzerland. A code issue vulnerability exists in ZITADEL versions 2.17.3 and earlier, 2.16.4 and earlier, which stems from allowing a...

Linux Kernel Resource Management Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an issue found in ksmbd where fs/ksmbd/smb2pdu.c has an OOPS for reuse after release and SMB2TREEDISCONNECT...

LuckyShot CRMx SQL Injection Vulnerability

CRMx is a super flexible micro CRM system from the individual developer Xavi Esteve. A security vulnerability exists in luckyshot CRMx that stems from an incorrect operation leading to sql injection...

FlatPress security vulnerability

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. flatpressblog/flatpress has a security vulnerability that stems from PHP remote file inclusion. No details of the vulnerability are currently available...

Apple iOS Security Vulnerabilities

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple iOS and macOS. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...

Passport-wsfed-saml2 security vulnerability

Passport-wsfed-saml2 is an Auth0 open source token authentication provider. A security vulnerability exists in Passport-wsfed-saml2 version 4.6.2 and earlier, which can be exploited by an attacker to bypass WSFed authentication on a website using passport-wsfed-saml2...

Teledyne FLIR AX8 Operating System Command Injection Vulnerability

Teledyne FLIR AX8 is a series of thermal surveillance cameras from Teledyne FLIR USA. A command injection vulnerability exists in Teledyne FLIR AX8 version 1.46.16 and earlier, which stems from an unknown function in the palette.php file of its Web Service Handler component that operates on the...

Apache Tapestry code issues and vulnerabilities

Apache Tapestry is a component-oriented framework for creating highly scalable Web applications in Java.A remote code execution vulnerability exists in Apache Tapestry, which can be exploited by attackers to cause remote code execution...

FusionAuth path traversal vulnerability

FusionAuth is FusionAuth open source a best-of-breed authentication solution built for developers. A security vulnerability exists in versions prior to FusionAuth 1.41.3 that stems from allowing files outside of the application root directory to be viewed or retrieved using HTTP requests...

XWiki Platform security vulnerabilities

XWiki Platform is the French company XWiki's set of Wiki platform for creating Web collaboration applications. An input validation error vulnerability exists in XWiki Platform that stems from not properly clearing obfuscated entries. An attacker could exploit this vulnerability to obtain encrypte...

WordPress plugin ULTIMATE TABLES has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

Microsoft SharePoint security vulnerabilities

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

Trellix IPS Manager code-related vulnerabilities

Trellix IPS Manager is a next-generation IPS for local and virtual networks from American FireEye Trellix. A security vulnerability exists in Trellix IPS Manager versions prior to 10.1 M8, which stems from the ability to import a saved XML configuration file through an external entity attack by a...

Abode Iota: Format string error vulnerability

Abode Iota is a reliable Diy home security system from Abode. A formatting string error vulnerability exists in Abode Iota versions 6.9X and 6.9Z, which stems from the fact that an attacker can send an authenticated, malicious HTTP request to its web interface/action/wirelessConnect functionality...

Abode Iota: Format string error vulnerability

Abode Iota is a reliable Diy home security system from Abode. A formatting string error vulnerability exists in Abode Iota versions 6.9X and 6.9Z, which stems from the fact that an attacker can send an authenticated, malicious HTTP request to its web interface/action/wirelessConnect functionality...

Bento4 security vulnerabilities

Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version 1.6.0-639, which stems from excessive memory consumption in the AP4Array ::EnsureCapacity function in Core/Ap4Array.h. The vulnerability can be exploited to cause a...

Rocket.Chat authorization issue vulnerability

Rocket.Chat is an open source team chat software. A security vulnerability exists in Rocket.Chat Mobile App versions prior to 4.14.1.22788, which stems from incorrect authentication and can be exploited by an attacker to bypass local authentication...

Apache Pulsar input validation error vulnerability

Apache Pulsar is an Apache Foundation distributed messaging platform for cloud environments that integrates messaging, storage, and lightweight functional computing. The software supports multi-tenancy, persistent storage, multi-room cross-regional data replication, with strong consistency, high...

WhatsApp input validation error vulnerability

WhatsApp is a suite of mobile applications from the American company WhatsApp that use the Internet to send text messages. The application uses the contact information in a smartphone to find contacts using the software to transmit text, images, etc. WhatsApp suffers from a security vulnerability...

Adobe Bridge buffer error vulnerability

Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...

vm2 security vulnerabilities

VM2 is a sandbox that can run untrusted code with built-in modules for whitelisted nodes. versions of VM2 prior to 3.9.11 have a remote code execution vulnerability that can be exploited by an attacker to bypass sandbox protection in order to gain remote code execution privileges on the host...

Binary resource management error vulnerability

Binary is a library by the individual developers of gagliardetto. It is used for encoding/decoding Borsh and other formats. A security vulnerability exists in Binary versions prior to 0.7.1. An attacker exploited the vulnerability to allocate slices in memory with arbitrarily oversized values,...

HDF5 Group libhdf5 buffer error vulnerability

HDF5 Group libhdf5 is a high performance data management and storage suite from HDF5 Group, Inc. A buffer error vulnerability exists in HDF5 Group libhdf5 version 1.10.4, which stems from a specially crafted GIF file that can lead to code execution, and can be exploited by an attacker to trigger...

Autodesk 3ds Max security vulnerabilities

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max versions 2022, 2021, and 2020, which stems from the presence of a stack-based buffer overflow that can lead to code execution...

Multiple WAVLINK products have security vulnerabilities

WAVLINK AC1200 and so on are products of China RuiYin Technology WAVLINK company.WAVLINK AC1200 is a dual-band high-power wireless router.WAVLINK WL-WN531P3 is a wireless router.WAVLINK WN533A8 is a wireless router. A security vulnerability exists in WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3,...

Jenkins Openstack Heat Plugin security vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

TZInfo security vulnerability

TZInfo is a Ruby timezone library. A security vulnerability exists in TZInfo that stems from its susceptibility to relative path traversal causing TZInfo::Timezone.get to load arbitrary files. The following versions are affected: 0.3.60 and earlier, 1.0.0 through 1.2.9 only when used with the Rub...

Drupal code-related vulnerabilities

Drupal is an open source content management system developed in PHP by the Drupal community. A code issue vulnerability exists in Drupal versions prior to 9.3.19 and prior to 9.4.3, which stems from filenames not being cleaned up properly. An attacker could exploit this vulnerability to remotely...

Siemens Mendix Applications using Mendix 7 and Siemens Mendix Applications using Mendix 9 security vulnerabilities

Mendix is a high-productivity application platform that enables mobile and web applications to be built and continuously improved at scale. Siemens Mendix is vulnerable to an access control error that could be exploited by an attacker to set weak passwords...

Diffy security vulnerabilities

Diffy is a simple distinction in Ruby by Sam Goldstein, a personal developer. Diffy suffers from a security vulnerability that stems from the fact that the function that calls the diff utility in Diffy 3.4.1 does not properly handle double quotes in filenames when running in a Windows environment...

WordPress plugin Useful Banner Manager has a vulnerability related to cross-site request forgeing.

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Useful Banner Manager plugin version 1.6.1 and earlier versions are vulnerable to cross-site reques...

Illumina Local Run Manager security vulnerabilities

Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager contains an information disclosure vulnerability that could be exploited by remote attackers to...