5867 matches found
Path traversal
fs.mkdtemp and fs.mkdtempSync can be used to bypass the permission model check using a path traversal attack. This flaw arises from a missing check in the fs.mkdtemp API and the impact is a malicious actor could create an arbitrary directory. This vulnerability affects all users using the...
CVE-2023-32003
fs.mkdtemp and fs.mkdtempSync can be used to bypass the permission model check using a path traversal attack. This flaw arises from a missing check in the fs.mkdtemp API and the impact is a malicious actor could create an arbitrary directory. This vulnerability affects all users using the...
CVE-2023-32004
CVE-2023-32004 concerns Node.js 20, specifically its experimental permission model. Available sources describe a vulnerability in the file-system APIs where improper handling of Buffers can cause a traversal path to bypass file permission checks. The issue affects users operating under the experi...
CVE-2023-32006
The use of module.constructor.createRequire can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note th...
CVE-2023-21280
creationtimestamp| type| source ---|---|--- 2023-08-15 02:20:08+00:00| seen| https://t.me/cibsecurity/68518...
CVE-2023-3435
creationtimestamp| type| source ---|---|--- 2023-08-15 00:20:05+00:00| seen| https://t.me/cibsecurity/68498...
CVE-2023-4322
creationtimestamp| type| source ---|---|--- 2023-08-14 20:19:31+00:00| seen| https://t.me/cibsecurity/68456...
Fedora: Security Advisory for java-latest-openjdk-portable (FEDORA-2023-020d609edb)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
4337-snap (>=0.1.0, <=0.1.1), @0xabcdefg/smart-order-router (>=1.0.0, <=1.0.5) +1554 more potentially affected by CVE-2023-40014 via @openzeppelin/contracts (>=4.0.0, <=4.9.2)
@openzeppelin/contracts NPM version =4.0.0, =0.1.0, =1.0.0, =1.0.0, =3.24.7, =1.7.2, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.123.2 and more Source cves: CVE-2023-40014 Source advisory: OSV:GHSA-G4VP-M682-QQMP...
CVE-2023-40216
creationtimestamp| type| source ---|---|--- 2023-08-10 20:16:02+00:00| seen| https://t.me/cibsecurity/68239 2023-11-08 13:02:31+00:00| seen| https://t.me/cultofwire/1098...
CVE-2023-40012
creationtimestamp| type| source ---|---|--- 2023-08-09 20:15:02+00:00| seen| https://t.me/cibsecurity/68102...
HPESBHF04510 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall), Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.9007-20-2023 HPE Synergy 480 Gen10 Compute Module - Prior to 2.9007-20-2023 HPE Synergy 660 Gen10 Compute Module - Prior ...
CVE-2023-38184
creationtimestamp| type| source ---|---|--- 2023-08-08 22:20:31+00:00| seen| https://t.me/cibsecurity/68054...
CVE-2023-38764
creationtimestamp| type| source ---|---|--- 2023-08-08 20:14:26+00:00| seen| https://t.me/cibsecurity/68013...
CVE-2023-38769
creationtimestamp| type| source ---|---|--- 2023-08-08 20:14:24+00:00| seen| https://t.me/cibsecurity/68011...
CVE-2023-38765
creationtimestamp| type| source ---|---|--- 2023-08-08 20:14:15+00:00| seen| https://t.me/cibsecurity/68005...
CVE-2023-37646
creationtimestamp| type| source ---|---|--- 2023-08-08 20:14:12+00:00| seen| https://t.me/cibsecurity/68002...
CVE-2022-45821
creationtimestamp| type| source ---|---|--- 2023-08-08 16:14:20+00:00| seen| https://t.me/cibsecurity/67986...
PT-2023-4562 · Adobe · Acrobat Reader +3
Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Adobe Acrobat Document Cloud Adobe Acrobat Reader Document Cloud Description: The issue...