6213 matches found
CVE-2023-5913 A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.
Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1...
CVE-2023-5913 A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.
Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1...
Information disclosure
An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file...
CVE-2023-5136 Incorrect Permission Assignment in the TopoGrafix DataPlugin for GPX
An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file...
CVE-2023-5913: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1...
kernel: rxrpc: Make it so that a waiting process can be aborted
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Make it so that a waiting process can be aborted When sendmsg creates an rxrpc call, it queues it to wait for a connection and channel to be assigned and then waits before it can start shovelling data as the encrypted DATA...
kernel: ASoC: fsl_mqs: move of_node_put() to the correct location
In the Linux kernel, the following vulnerability has been resolved: ASoC: fslmqs: move ofnodeput to the correct location ofnodeput should have been done directly after mqspriv-regmap = sysconnodetoregmapgprnp; otherwise it creates a reference leak on the success path. To fix this, ofnodeput is...
kernel: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Check that sock is valid before iscsisetparam The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad "scsi: iscsi: iscsitcp: Fix null-ptr-deref while calling...
Rocky Linux 8 : go-toolset:rhel8 (RLSA-2022:5337)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:5337 advisory. - encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data. CVE-2022-24675 - regexp.Compile ...
PT-2023-9667 · Cisco · Cisco Unified Contact Center Enterprise +1
Name of the Vulnerable Software and Affected Versions: Cisco Enterprise Chat and Email ECE affected versions not specified Description: A vulnerability in the External Agent Assignment Service EAAS feature could allow an unauthenticated, remote attacker to cause a denial of service DoS condition ...
PT-2023-8579 · Opentext · Opentext Fortify Scancentral Dast
Name of the Vulnerable Software and Affected Versions: opentext Fortify ScanCentral DAST versions 21.1 through 23.1 Description: The issue is related to an Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST, which could be exploited to gain elevated privileges. This...
Microsoft Azure US Accelarators Synapse SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the permissions granted to an SAS token. An attacker can leverage this vulnerability to launch a supply-chain attac...
MAL-2023-8437 Malicious code in ch-frontend-assignment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 92c955a3b8b209ddf9f49a5b749724ccfbb0bdd4c9941bb6f327c4b83e193d81 The OpenSSF Package Analysis project identified 'ch-frontend-assignment' @ 0.1.0 npm as malicious. It is considered malicious because: - The...
Malicious code in ch-frontend-assignment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 92c955a3b8b209ddf9f49a5b749724ccfbb0bdd4c9941bb6f327c4b83e193d81 The OpenSSF Package Analysis project identified 'ch-frontend-assignment' @ 0.1.0 npm as malicious. It is considered malicious because: - The...
CVE-2023-42489
EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource...
CVE-2023-42489
EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource...
Code injection
EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource...
CVE-2023-42489
The CVE-2023-42489 entry concerns EisBaer Scada with a root cause of Incorrect Permission Assignment for Critical Resource (CWE-732). Affected software is EisBaer Scada; the vulnerability is tied to misconfigured permissions on critical resources, enabling high-impact exposure (C/H I/H A/H per CV...