CVE-2023-4708 Infosoftbd Clcknshop GET Parameter all sql injection

A vulnerability was found in Infosoftbd Clcknshop 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /collection/all of the component GET Parameter Handler. The manipulation of the argument tag leads to sql injection. The attack may be initiated remotely...

CVE-2022-22305

An improper certificate validation vulnerability CWE-295 in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle th...

CVE-2022-46527

ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser...

CVE-2022-46527

ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser...

The vulnerability of the NFC microprogramming software services provided by the microcircuits S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82 allows a perpetrator to trigger a restart of the NFC service.

The vulnerability of the NFC microprogramming software services provided by the microcircuits S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to...

Malicious code in wallet-switch-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d7691c4b893aae23a99dd7bc91f8757ec2b3df3b7c311fed6fc4be65dda85fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-watch-asset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01675c298edf41b4d5fe21203170b72f5e72730d4f4fc10d9714a6a8fe277408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-41743

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40278, Acronis Cyber Protect Cloud Agent Windows before build 31637, Acronis Cyber Protect 15 Windows before build 35979,...

Privilege escalation

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40278, Acronis Agent Windows before build 31637, Acronis Cyber Protect 15 Windows before build 35979...

CVE-2022-45451

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40173, Acronis Agent Windows before build 30600, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2023-41743

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40278, Acronis Cyber Protect Cloud Agent Windows before build 31637, Acronis Cyber Protect 15 Windows before build 35979,...

CVE-2023-41743

The CVE-2023-41743 issue is a local privilege escalation in Acronis products due to insecure driver communication port permissions. Affected: Acronis Cyber Protect Home Office (Windows) < build 40278; Acronis Agent (Windows) < build 31637; Acronis Cyber Protect 15 (Windows)

CVE-2022-45451

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40173, Acronis Agent Windows before build 30600, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2022-45451

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40173, Acronis Agent Windows before build 30600, Acronis Cyber Protect 15 Windows before build 30984...

SUSE CVE-2023-4573

When receiving rendering data over IPC mStream could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a code issue vulnerability that stems from a potentially exploitable crash that can be exploited by an attacker to cause a use-after-release when receiving rendered data vi...

UBUNTU-CVE-2023-4573

When receiving rendering data over IPC mStream could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox suffers from a resource management error vulnerability that stems from the fact that when creating a callback to display a color picker window via IPC, multiple identical callbacks may be created...

MAL-2023-7942 Malicious code in twentynineteen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41e718fa7d54fba600dedc033d1d1c93b282fdae82403869bf77c53363acf842 The OpenSSF Package Analysis project identified 'twentynineteen' @ 2.5.1 npm as malicious. It is considered malicious because: - The package...