Adobe ColdFusion Unauthenticated Remote Code Execution
WEBMay 3, 2023 · sf has realised a new security note Adobe ColdFusion Unauthenticated Remote Code Execution
List of Bugs - Site 1 - CXSECURITY
WEBSep 18, 2024 · Site 1 CXSECURITY.COM List is a huge collection of information on data communications safety. Its main objective is to inform about errors in various applications.
Vulnerability CVE-2021-40836 - CXSECURITY
WEBDec 22, 2021 · CVE-2021-40836. Published: 2021-12-22. Description: A vulnerability affecting F-Secure antivirus engine was discovered whereby scanning MS outlook .pst files can lead to denial-of-service. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.
Show CWE-319: Cleartext Transmission of Sensitive Information ...
WEBAn unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as only non-sensitive information can be obtained but ...
Products related CVE (CXSECURITY.COM)
WEBProducts List of Common Vulnerabilities and Exposures. A basis for evaluation among tools and databases. The way to interoperability and better security coverage.
Show CWE-601: URL Redirection to Untrusted Site ('Open Redirect ...
WEBAn open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. The impact of this vulnerability includes potential phishing attacks, malware ...
Vulnerability CVE-2024-9006
WEB5 days ago · CVE-2024-9006. Published: 2024-09-19 Modified: 2024-09-20. Description: A vulnerability was found in jeanmarc77 123solar 1.8.4.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file config/config_invt1.php. The manipulation of the argument PASSOx leads to code injection.
Vulnerability CVE-2024-22252 - CXSECURITY
WEBCVE-2024-22252. Published: 2024-03-05. Description: VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Vulnerability CVE-2024-7656 - CXSECURITY
WEBAug 24, 2024 · CVE-2024-7656. Published: 2024-08-24. Description: The Image Hotspot by DevVN plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.5 via deserialization of untrusted input in the 'devvn_ihotspot_shortcode_func' function. This makes it possible for authenticated attackers, with Author-level access ...
Vulnerability CVE-2024-3708 - CXSECURITY
WEBCVE-2024-3708. Published: 2024-05-23. Description: A condition exists in lighttpd version prior to 1.4.51 whereby a remote attacker can craft an http request which could result in multiple outcomes: 1.) cause lighttpd to access freed memory in which case the process lighttpd is running in could be terminated or other non-deterministic behavior ...
Skip to content