785 matches found
MGASA-2023-0323 Fix u-boot reading file would overwrite reserved memory error
U-boot would not boot after upgrading to 2023.01 version on RPI 4/CM4 boards. Log would report: - Found EFI removable media binary efi/boot/bootaa64.efi - Reading file would overwrite reserved memory The updated package allows u-boot to load properly bootaa64.efi...
CVE-2022-33945
Improper input validation in some IntelR Server board and IntelR Server System BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
The vulnerability of the Xpedition Layout Browser software, which is used for viewing and analyzing electronic circuits and printed circuit boards, stems from buffer overflow in the stack. This allows an attacker to execute arbitrary code.
The vulnerability of the Xpedition Layout Browser software for viewing and analyzing electronic circuits and printed circuit boards is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
WordPress Kanban Boards for WordPress Plugin <= 2.5.21 is vulnerable to Arbitrary Code Execution
Software Kanban Boards for WordPress Type Plugin Vulnerable versions = 2.5.21 Fixed in N/A OWASP Top 10 A1: Injection Classification Arbitrary Code Execution CVE CVE-2023-40606 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 1396a350cb32 Credits TomS Required privilege...
CVE-2023-22841
Unquoted search path in the software installer for the System Firmware Update Utility SysFwUpdt for some IntelR Server Boards and IntelR Server Systems Based on IntelR 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
Code injection
Unquoted search path in the software installer for the System Firmware Update Utility SysFwUpdt for some IntelR Server Boards and IntelR Server Systems Based on IntelR 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-22841
CVE-2023-22841 affects Intel® SysFwUpdt (System Firmware Update Utility) for Intel® Server Boards/Systems based on the 621A chipset, prior to version 16.0.7. The vulnerability stems from an unquoted search path in the software installer, potentially allowing an authenticated local user to escalat...
PT-2023-18720 · Intel · System Firmware Update Utility
Name of the Vulnerable Software and Affected Versions: System Firmware Update Utility SysFwUpdt for some IntelR Server Boards and IntelR Server Systems Based on IntelR 621A Chipset versions prior to 16.0.7 Description: The issue is related to an unquoted search path in the software installer, whi...
Intel® Server Boards and Server System Firmware Update Utility Advisory
Summary: A potential security vulnerability in the System Firmware Update Utility for some Intel® Server Boards and Server System may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-22841...
Connectix Boards 0.5.2 SQL Injection
==================================================================================================================================== | Title : Connectix Boards v0.5.2 SQL injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2...
CVE-2023-3590
Mattermost fails to delete card attachments in Boards, allowing an attacker to access deleted attachments...
CVE-2023-3585
Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link...
CVE-2023-3586
Mattermost fails to disable public Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting in previously-shared public Boards to remain accessible...
Design/Logic Flaw
Mattermost fails to disable public Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting in previously-shared public Boards to remain accessible...
CVE-2023-3590 Deleted attachments in Boards remain accessible
Mattermost fails to delete card attachments in Boards, allowing an attacker to access deleted attachments...
CVE-2023-3586 Disabling publicly-shared boards does not disable existing publicly available board links
Mattermost fails to disable public Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting in previously-shared public Boards to remain accessible...
CVE-2023-3586 Disabling publicly-shared boards does not disable existing publicly available board links
Mattermost fails to disable public Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting in previously-shared public Boards to remain accessible...
CVE-2023-3586
Mattermost CVE-2023-3586 describes a flaw where the option Enable Publicly-Shared Boards can be disabled, but existing publicly shared Boards remain accessible. The issue affects the public boards feature in Mattermost; the underlying problem is that disabling the feature does not revoke or disab...
CVE-2023-3585
Mattermost Boards contains a vulnerability where board links are not properly validated. The underlying cause is improper validation of a board link, enabling an attacker to crash a channel by posting a specially crafted boards link. The CVE entry notes a medium severity (CVSS v3.1 base score 4.3...
