PT-2023-30282 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus version 4.2.0 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in the "/common/log/list" API endpoint. Recommendations: For Novel-Plus version 4.2.0,...

CVE-2023-5846

creationtimestamp| type| source ---|---|--- 2023-11-02 19:27:47+00:00| seen| https://t.me/cibsecurity/73463...

DEBIAN-CVE-2023-3164

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file...

DEBIAN-CVE-2023-1193

A use-after-free flaw was found in setupasyncwork in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work...

AZL-31853 CVE-2023-1192 affecting package kernel for versions less than 5.15.137.1-1

A use-after-free flaw was found in smb2isstatusiotimeout in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region,...

UBUNTU-CVE-2023-1192

A use-after-free flaw was found in smb2isstatusiotimeout in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region,...

The vulnerability of the SAP CommonCryptoLib library, related to pointer dereferencing errors, allows a perpetrator to trigger a service failure.

The vulnerability of the SAP CommonCryptoLib library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Moderate: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

SUSE CVE-2023-24936

unknown...

SUSE CVE-2023-33128

unknown...

CVE-2023-45780

creationtimestamp| type| source ---|---|--- 2023-10-30 21:19:58+00:00| seen| https://t.me/cibsecurity/73178...

CVE-2023-5836

creationtimestamp| type| source ---|---|--- 2023-10-29 02:18:09+00:00| seen| https://t.me/cibsecurity/73110...

The vulnerability of the data collection module of the Dell Common Event Enabler, specifically the Dell OpenManage Client Instrumentation (OMCI) tool, is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges.

The vulnerability of the data collection module of the Dell Common Event Enabler, implemented through the Dell OpenManage Client Instrumentation OMCI, is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2018-17878

creationtimestamp| type| source ---|---|--- 2023-10-27 02:16:14+00:00| seen| https://t.me/cibsecurity/73027...

The vulnerability of the Events & Notifications sub-component of the PeopleSoft Enterprise CC Common Application Objects component of the Oracle PeopleSoft Products allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Events & Notifications sub-component of the PeopleSoft Enterprise CC Common Application Objects component in the Oracle PeopleSoft Products suite of business applications is related to insufficient validation of input data. Exploiting this vulnerability may allow an...

CVE-2023-5796

creationtimestamp| type| source ---|---|--- 2023-10-26 22:16:01+00:00| seen| https://t.me/cibsecurity/72994...

CVE-2023-5139

creationtimestamp| type| source ---|---|--- 2023-10-26 12:29:07+00:00| seen| https://t.me/cibsecurity/72939...

CVE-2022-38484

creationtimestamp| type| source ---|---|--- 2023-10-25 22:39:12+00:00| seen| https://t.me/cibsecurity/72827...

CVE-2023-42490

EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2023-43208

creationtimestamp| type| source ---|---|--- 2023-10-25 17:14:07+00:00| seen| https://t.me/ctinow/145374 2023-10-26 07:41:09+00:00| seen| https://t.me/thehackernews/4057 2023-10-26 12:02:26+00:00| seen| https://t.me/KomunitiSiber/987 2023-10-26 13:01:46+00:00| seen|...