10252 matches found
Design/Logic Flaw
IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 262268...
CVE-2023-38730 IBM Spectrum Copy Data Management information disclosure
IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 262268...
CVE-2023-38730
IBM Spectrum Copy Data Management (SCDM) versions 2.2.0.0–2.2.19.0 use weaker cryptographic algorithms, enabling potential disclosure of highly sensitive data. The root cause is the use of insufficiently strong cryptography (e.g., weak DH moduli discussed in the IBM bulletin), affecting confident...
CVE-2023-38730 IBM Spectrum Copy Data Management information disclosure
IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 262268...
IBM Storage Copy Data Management 加密问题漏洞
IBM Storage Copy Data Management is a data storage system from International Business Machines IBM. A security vulnerability exists in IBM Storage Copy Data Management versions 2.2.0.0 through 2.2.19.0 that stems from the use of an insufficiently strong encryption algorithm...
PT-2023-26578 · Ibm · Ibm Storage Copy Data Management
Name of the Vulnerable Software and Affected Versions: IBM Storage Copy Data Management versions 2.2.0.0 through 2.2.19.0 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information...
OESA-2023-1544 yasm security update
Yasm is a complete rewrite of the NASM assembler under the “new” BSD License. Security Fixes: yasm v1.3.0 was discovered to contain a memory leak via the function yasmintnumcopy at /libyasm/intnum.c.CVE-2023-31975...
CVE-2023-41249
In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step...
Copy(CTRL+C) and Paste (CTRL+V) is not working on MAC when using Russian language
CopyCTRL+C and Paste CTRL+V is not working on MAC when using the Russian language...
PT-2023-27868 · Jetbrains · Teamcity
Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05.3 Description: The issue allows for reflected XSS during the copying of Build Step. Recommendations: For versions prior to 2023.05.3, update to version 2023.05.3 or later to resolve the issue...
PT-2023-27476 · Lg · Lg Simple Editor
Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this issue. The specif...
PT-2023-27485 · Lg · Lg Simple Editor
Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this issue. The specif...
Security Advisory 0089
Security Advisory 0089 . CSAF PDF Date: August 23, 2023 Revision | Date | Changes ---|---|--- 1.0 | August 23, 2023 | Initial release The CVE-ID tracking this issue: CVE-2023-24548 CVSSv3.1 Base Score: 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Common Weakness Enumeration: CWE-120 Buffer Co...
AZL-44271 CVE-2020-18768 affecting package openjpeg2 2.3.1-12
There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file...
PT-2023-4539 · Unknown +1 · Postgresql +1
Name of the Vulnerable Software and Affected Versions: PostgreSQL version 12.2 Description: The issue is related to a buffer copy without checking the size of the input data in the signal handler for SIGHUP signals in PostgreSQL. This could potentially allow a remote attacker to cause a denial of...
The vulnerability in the yank_copy_line function of the register.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the yankcopyline function in the register.c component of the Vim text editor is related to incorrect calculation of buffer size. Exploiting this vulnerability may allow an attacker to access confidential data, compromise its integrity, and even cause service interruptions...
CVE-2023-2971 Typora Local File Disclosure
Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text fro...
CVE-2023-40337
A flaw was found in the Jenkins Folders plugin. Affected versions of this plugin allow attackers to copy a view inside a folder...
