4356 matches found
CVE-2023-25582
Two OS command injection vulnerabilities exist in the zebra vlanname functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is in the code branch...
Command injection
Two OS command injection vulnerabilities exist in the zebra vlanname functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is in the code branch...
CVE-2023-25582
Two OS command injection vulnerabilities exist in the zebra vlanname functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is in the code branch...
GitLab 13.7 < 15.11.10 / 16.0 < 16.0.6 / 16.1 < 16.1.1 (CVE-2023-2576)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. Th...
Gitlab -- Vulnerabilities
Gitlab reports: ReDoS via EpicReferenceFilter in any Markdown fields New commits to private projects visible in forks created while project was public New commits to private projects visible in forks created while project was public Maintainer can leak masked webhook secrets by manipulating URL...
Improper Authorization
gitlab is vulnerable to Improper Authorization. The vulnerability exists due to the incorrect authorization in the Asana integration's branch restriction feature in the library, which allows an attacker to close Asana tasks from unrestricted branches...
U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency has added a batch of six flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. This comprises three vulnerabilities that Apple patched this week CVE-2023-32434, CVE-2023-32435, and CVE-2023-32439...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure. Credentials can only be entered on the command line e.g., for amqp-publish or amqp-consume and are thus visible to local attackers by listing a process and its arguments. Remediation A fix was pushed into the maste...
SUSE: Security Advisory (SUSE-SU-2023:2581-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
semver vulnerable to Regular Expression Denial of Service
Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...
CVE-2023-3189
A vulnerability, which was classified as problematic, was found in SourceCodester Online School Fees System 1.0. This affects an unknown part of the file /paysystem/branch.php of the component POST Parameter Handler. The manipulation of the argument branch leads to cross site scripting. It is...
SourceCodester Online School Fees System 跨站脚本漏洞
Online School Fees System is an online school fees system by Lewa Personal Developer. A cross-site scripting vulnerability exists in SourceCodester Online School Fees System version 1.0 due to an unknown part of the file /paysystem/branch.php in the component POST Parameter handler, which leads t...
PT-2023-23503 · Unknown · Sourcecodester Online School Fees System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online School Fees System version 1.0 Description: A problematic issue was found in the component POST Parameter Handler, affecting an unknown part of the file /paysystem/branch.php. The manipulation of the branch argument lead...
Design/Logic Flaw
Discourse is an open source discussion platform. Prior to version 3.0.4 of the stable branch and version 3.1.0.beta5 of the beta and tests-passed branches, multiple duplicate topics could be created if topic embedding is enabled. This issue is patched in version 3.0.4 of the stable branch and...
CVE-2023-32301
Discourse prior to versions 3.0.4 (stable) and 3.1.0.beta5 (beta/tests-passed) were affected by a flaw that could allow creation of multiple duplicate topics when topic embedding is enabled. The underlying issue is fixed in Discourse 3.0.4 (stable) and 3.1.0.beta5 (beta/tests-passed). A workaroun...
Malicious code in migrate-branch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f00afb76676c4aac170617bf2d9fe76bba3c4ea0c71610c6f3a5048b5c2ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-594 Malicious code in migrate-branch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f00afb76676c4aac170617bf2d9fe76bba3c4ea0c71610c6f3a5048b5c2ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2023-23712 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.0.4 Discourse version 3.1.0.beta5 and earlier in the beta and tests-passed branches Description: Discourse is an open source discussion platform. Multiple duplicate topics could be created if topic embedding is...
Ubuntu: Security Advisory (USN-6151-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...