6450 matches found
CVE-2023-27411
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.4. The affected applications is vulnerable to SQL injection. This could allow an authenticated remote attackers to execute arbitrary SQL queries on the server database and escalate privileges...
AZL-36957 CVE-2023-39976 affecting package libqb for versions less than 2.0.8-1
logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered...
PT-2023-24476 · Foswiki · Foswiki +1
Name of the Vulnerable Software and Affected Versions: Foswiki versions 2.1.7 and below Description: An issue in the SpreadSheetPlugin component of Foswiki allows attackers to execute a directory traversal. Recommendations: For versions 2.1.7 and below, update to a version above 2.1.7 to resolve...
AZL-27897 CVE-2023-4147 affecting package kernel for versions less than 5.15.126.1-1
A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTARULECHAINID. This flaw allows a local user to crash or escalate their privileges on the system...
AZL-27893 CVE-2023-3896 affecting package vim for versions less than 9.0.1562-2
Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3...
AZL-27870 CVE-2022-48579 affecting package clamav for versions less than 0.105.2-2
UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains...
SUSE CVE-2023-4104
An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN setups. This bug only affects Mozilla VPN on Linux. Other operating systems are unaffected. This vulnerability affects Mozilla VPN 2.16.1 Linux...
AZL-34907 CVE-2023-3978 affecting package kubevirt for versions less than 1.2.0-1
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
AZL-31690 CVE-2023-3978 affecting package cni-plugins for versions less than 1.3.0-6
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
AZL-27813 CVE-2023-3978 affecting package kubevirt for versions less than 0.59.0-24
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
AZL-33331 CVE-2023-3978 affecting package packer for versions less than 1.9.5-3
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
AZL-27810 CVE-2023-3978 affecting package cert-manager for versions less than 1.11.2-14
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
AZL-35299 CVE-2023-3978 affecting package telegraf for versions less than 1.29.4-1
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
AZL-44055 CVE-2023-3978 affecting package podman for versions less than 5.6.1-2
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
AZL-37302 CVE-2023-29409 affecting package golang for versions less than 1.21.6-1
Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to = 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three...
AZL-27814 CVE-2023-29409 affecting package msft-golang for versions less than 1.20.7-1
Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to = 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three...
UBUNTU-CVE-2023-4056
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This...
UBUNTU-CVE-2023-4054
When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code. This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and...
UBUNTU-CVE-2023-4052
The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction a form of symbolic link to allow...