PT-2024-3446 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: The issue is related to the MySQL Server product of Oracle MySQL, specifically the Server: Data Dictionary component. It allows a high-privileged attack...

PT-2024-3730 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.34 and prior MySQL Server versions 8.3.0 and prior Description: The vulnerability in the MySQL Server product of Oracle MySQL is related to insufficient input validation in the Server: DML component. This issue can b...

PT-2024-3731 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: The issue is related to insufficient input validation in the Server: Optimizer component of Oracle MySQL Server. A difficult to exploit vulnerability...

PT-2024-3943 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: A vulnerability in the MySQL Server product of Oracle MySQL allows a high privileged attacker with network access via multiple protocols to compromise t...

PT-2024-3195 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.36 and prior Oracle MySQL Server versions 8.3.0 and prior Description: The issue is related to a vulnerability in the MySQL Server product, specifically in the Server: Information Schema component. This...

PT-2024-4663 · Mcafee · Mcafee Security: Antivirus Vpn For Android

Name of the Vulnerable Software and Affected Versions: McAfee Security: Antivirus VPN for Android versions prior to 8.3.0 Description: The issue is related to improper deep link validation, which could allow an attacker to launch an arbitrary URL within the app. This could potentially lead to...

GHSA-8PJX-JJ86-J47P Grafana path traversal

Today we are releasing Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7. This patch release includes a high severity security fix that affects Grafana versions from v8.0.0-beta1 through v8.3.0. Release v8.3.1, only containing a security fix: - Download Grafana 8.3.1 - Release notes Release v8.2.7, only...

CVE-2023-46218 affecting package curl for versions less than 8.5.0-1

CVE-2023-46218 affecting package curl for versions less than 8.5.0-1. An upgraded version of the package is available that resolves this issue...

WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Type Plugin Vulnerable versions = 8.2.2 Fixed in 8.3.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-52222 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 176f4af4b60c Credits Rafie Muhammad Patchsta...

PT-2023-9838 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: The issue is related to insufficient input validation in the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with...

PT-2023-9624 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: The issue is related to a vulnerability in the InnoDB component of the MySQL Server product, which is caused by weaknesses in the authorization procedur...

AZL-31288 CVE-2023-38545 affecting package curl for versions less than 8.3.0-2

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...

CVE-2023-38545 affecting package curl for versions less than 8.3.0-2

CVE-2023-38545 affecting package curl for versions less than 8.3.0-2. A patched version of the package is available...

CVE-2023-38546 affecting package curl for versions less than 8.3.0-2

CVE-2023-38546 affecting package curl for versions less than 8.3.0-2. A patched version of the package is available...

CVE-2023-38039 affecting package curl for versions less than 8.3.0-1

CVE-2023-38039 affecting package curl for versions less than 8.3.0-1. An upgraded version of the package is available that resolves this issue...

curl security vulnerability

curl is a tool used to transfer data from or to a server. A security vulnerability exists in curl versions 7.9.1 through 8.3.0 that stems from the presence of a cookie injection vulnerability that allows an attacker to insert a cookie into a running program...

PT-2023-24096 · Unknown · Suitecrm-Core

Name of the Vulnerable Software and Affected Versions: suitecrm-core versions prior to 8.3.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation and later displays it, allowing attackers to inject...

Adobe Substance 3D Painter out-of-bounds write vulnerability (CNVD-2023-41409)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Painter 8.3.0 and earlier versions, which can be exploited by an attacker to execute code in the current user's context...

Adobe Substance 3D Painter Out-of-Bounds Read Vulnerability

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Painter 8.3.0 and earlier versions, which can be exploited by an attacker to cause a sensitive memory disclosure...

Adobe Substance 3D Painter Out-of-Bounds Read Vulnerability (CNVD-2023-40147)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Painter version 8.3.0 and prior versions, which can be exploited by an attacker to execute code in the current user's context...