8747 matches found
Cisco NX-OS Software Unauthorized Filesystem Access (CVE-2019-1601)
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file. The vulnerability is due to a failure to impose strict filesystem permissions on the targeted device. An attacker coul...
Cisco FXOS and NX-OS Software Unauthorized Directory Access (CVE-2019-1600)
A vulnerability in the file system permissions of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive information that is stored in the file system of an affected system. The vulnerability is due to improper implementation of file system...
Cisco NX-OS Software NX-API Arbitrary Code Execution (CVE-2018-0301)
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow. The vulnerability is due to incorrect input validation in the authentication module of the...
Cisco FXOS and NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1611)
A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI...
Cisco NX-OS Software NX-API Arbitrary Code Execution (CVE-2019-1605)
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API feature. An attacker could exploit this vulnerability by sending a crafted HTTP or HTT...
Cisco NX-OS Software NX-API Command Injection (CVE-2019-1614)
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could exploit this...
PT-2023-26290 · Kofax · Kofax Power Pdf
Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability, as the target...
PT-2023-25907 · Kofax · Kofax Power Pdf
Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. It requires user interaction, where the target must visit a malicious page...
PT-2023-24793 · Unknown · Sante Dicom Viewer Pro
Name of the Vulnerable Software and Affected Versions: Sante DICOM Viewer Pro affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...
opencv:imdecode_fuzzer: Heap-buffer-overflow in opj_jp2_apply_pclr
Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5757342214651904 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: imdecodefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...
HPESBHF04478 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00807, 2023.2 IPU - BIOS Advisory, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 System - Prior to v2.8004-20-2023 HPE Apollo 4200 Gen10 Server - Prior to v2.8004-20-2023 HPE Apollo 4510 Gen10 System - Prior to v2.8004-20-2023 HPE Apollo...
EulerOS Virtualization 3.0.2.0 : vim (EulerOS-SA-2023-1736)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in vim/vim prior to 8.2. CVE-2022-0319 - Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-0413,...
CVE-2023-2000 Unrestricted navigation due to unvalidated mattermost server redirection
Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website...
CVE-2023-2000 Unrestricted navigation due to unvalidated mattermost server redirection
Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website...
CVE-2023-2000 Unrestricted navigation due to unvalidated mattermost server redirection
Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website...
CVE-2023-2000
CVE-2023-2000 affects Mattermost Desktop App. The issue is an unvalidated mattermost server redirect, enabling navigation to an arbitrary website. Documents consistently describe the vulnerability as related to server redirects not being properly authenticated/validated, leading to potential unre...
SUSE: Security Advisory (SUSE-SU-2023:2000-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15: fwupd / fwupd-devel / fwupd-lang / libfwupd2 / etc (SUSE-SU-2023:2000-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2000-1 advisory. - rebuild the package with the new secure boot key bsc1209188. Tenable has extracted the preceding description block directly from the SUSE...
MSC-2022-2000
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...