3941 matches found
CVE-2023-43492
In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication...
CVE-2023-38584 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow
In Weintek's cMT3000 HMI Web CGI device, the cgi-bin commandwb.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication...
CVE-2023-44391 Prevent unauthorized access to summary details in Discourse
Discourse is an open source platform for community discussion. User summaries are accessible for anonymous users even when hideuserprofilesfrompublic is enabled. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 version of Discourse. Users are advised to upgrade. There are no know...
PT-2023-29226 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.1.1 Discourse versions prior to 3.2.0.beta2 Description: Discourse is an open source platform for community discussion. User summaries are accessible for anonymous users even when hide user profiles from public i...
PT-2023-6284 · Weintek · Cmt3000 Hmi Web Cgi
Name of the Vulnerable Software and Affected Versions: Weintek cMT3000 HMI Web CGI affected versions not specified Description: The issue is related to a stack-based buffer overflow in the cgi-bin codesys.cgi of Weintek's cMT3000 HMI Web CGI device. This could allow an anonymous attacker to hijac...
Weintek cMT Buffer Error Vulnerability
Weintek cMT is a human machine interface application from Weintek. A security vulnerability exists in the Weintek cMT3000 HMI Web CGI, which stems from the fact that cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypa...
CVE-2023-43696
Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server...
SICK APU Code Issue Vulnerability
SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in SICK APU that stems from an improper access control vulnerability. The vulnerability can be exploited by an attacker to download files and upload arbitrary files via anonymous access to an FTP server...
CVE-2023-5256
In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation. This vulnerability only affects sites with the JSON:API module enabled,...
Privilege escalation
In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation. This vulnerability only affects sites with the JSON:API module enabled,...
UBUNTU-CVE-2023-5256
In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation. This vulnerability only affects sites with the JSON:API module enabled,...
PT-2023-31979 · Drupal · Drupal Json:Api Module
Name of the Vulnerable Software and Affected Versions: Drupal JSON:API module affected versions not specified Description: In certain scenarios, Drupal's JSON:API module will output error backtraces, potentially causing sensitive information to be cached and made available to anonymous users,...
Drupal 10.1.x < 10.1.4 Cache Poisoning
According to its self-reported version, the instance of Drupal running on the remote web server is 8.7.x prior to 9.5.11, 10.0.x prior to 10.0.11 or 10.1.x prior to 10.1.4. In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause...
User with system administrator privilege can search restricted pages.
h3. Issue Summary Starting Confluence 8.5.1 when a user is granted System administrator permission at Global permissions. The user can search for Restricted content and the restricted page gets displayed in search, when tried to access it says "Page can't be found". This behaviour is not...
Drupal Cache Poisoning Vulnerability (SA-CORE-2023-006) - Linux
Drupal is prone to a cache poisoning vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; ifdescription...
DRUPAL-CORE-2023-006
In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation. This vulnerability only affects sites with the JSON:API module enabled,...
kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests
A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAPNETADMIN capability to crash or potentially...
PT-2023-5573 · Unknown · Jumpserver
Name of the Vulnerable Software and Affected Versions: JumpServer versions 3.0.0 through 3.5.4 JumpServer versions 3.6.0 through 3.6.3 Description: The issue is related to a weakness in the authentication procedure of JumpServer, an open-source bastion host and professional operation and...
Proofpoint Insider Threat Management Trust Management Issues Vulnerabilities
Proofpoint Insider Threat Management Proofpoint ITM is an insider threat management system from Proofpoint USA. A trust management issue vulnerability exists in Proofpoint Insider Threat Management versions prior to 7.14.3.69, which stems from an incorrect authentication verification vulnerabilit...
