141 matches found
CVE-2024-1708 Improper limitation of a pathname to a restricted directory (“path traversal”)
ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems...
CVE-2024-1708
CVE-2024-1708/1709 affect ConnectWise ScreenConnect (Server 23.9.7 and earlier). A path-traversal flaw (CVE-2024-1708) may allow remote code execution; an authentication-bypass flaw (CVE-2024-1709) enables access without credentials, potentially leading to RCE. Public exploit tooling exists (e.g....
CVE-2024-1708 Improper limitation of a pathname to a restricted directory (“path traversal”)
ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems...
Exploit for Path Traversal in Connectwise Screenconnect
CVE-2024-1708 and CVE-2024-1709 A Proof of Concept developed...
Malicious code in wlwz-2312-1708 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b00585b27b904bc0a6e2ad2a6766cd0c85a1a85413b7cb4d021533909f014f45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GitLab < 15.8.5 (SECURITY-RELEASE-GITLAB-15-10-1-RELEASED)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A...
Rocky Linux 8 : liblouis (RLSA-2020:1708)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:1708 advisory. - Liblouis 3.5.0 has a Segmentation fault in loulogPrint in logging.c. CVE-2018-11577 - Liblouis 3.5.0 has a stack-based Buffer Overflow in the function...
Oracle Linux 8 : liblouis (ELSA-2020-1708)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1708 advisory. - Apply patch for CVE-2018-12085 1589942 - Fix CVE-2018-11577 1585906 - Fix CVE-2018-11684 1588632 - Fix CVE-2018-11685 1588637 Tenable has extracted t...
Mageia: Security Advisory (MGASA-2023-0240)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated cri-o packages fix security vulnerability
Denial of service due to memory or disk exhaustion. CVE-2022-1708...
CVE-2023-1708
creationtimestamp| type| source ---|---|--- 2023-04-06 00:26:44+00:00| seen| https://t.me/cibsecurity/61512...
CVE-2023-1708
CVE-2023-1708 affects GitLab CE/EE, where non-printable characters copied from the clipboard can trigger execution of unexpected commands on the victim machine. Affected versions are GitLab CE/EE 1.0 up to but not including 15.8.5, 15.8.x up to 15.8.4, 15.9 up to but not including 15.9.4, and 15....
GitLab 1.0 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1708)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-printable characters gets copied from clipboard,...
Fedora 37 : OpenImageIO (2023-c3d65c8f7b)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c3d65c8f7b advisory. Release 2.4.8.1 13 Feb 2023 -- compared to 2.4.8.0 Fixtarga: guard against corrupted tga files Fixes TALOS-2023-1707 / CVE-2023-24473, TALOS-2023-17...
Rocky Linux 8 : container-tools:rhel8 (RLSA-2022:7457)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7457 advisory. - runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 whe...
SUSE CVE-2013-1708
Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service application crash via a crafted WAV file that is not properly handled by the nsCString::CharAt function...
SUSE SLES15 / openSUSE 15 Security Update : conmon (SUSE-SU-2022:4635-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4635-1 advisory. conmon was updated to version 2.1.5: don't leak syslogidentifier logging: do not read more that the buf size logging: fix erro...
SUSE SLES15 / openSUSE 15 Security Update : conmon (SUSE-SU-2022:4607-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4607-1 advisory. conmon was updated to version 2.1.5: don't leak syslogidentifier logging: do not read more that the buf size logging: fix erro...
SUSE-SU-2022:4607-1 Security update for conmon
This update for conmon fixes the following issues: conmon was updated to version 2.1.5: don't leak syslogidentifier logging: do not read more that the buf size logging: fix error handling Makefile: Fix install for FreeBSD signal: Track changes to getsignaldescriptor in the FreeBSD version Packit:...
