1805 matches found
Moderate: Red Hat Security Advisory: less security update
An update for less is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
less: crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal
A vulnerability was found in less. This flaw allows crafted data to result in "less -R" not filtering ANSI escape sequences sent to the terminal...
The vulnerability of the Windows Hyper-V hardware virtualization system allows a attacker to trigger a service failure.
The vulnerability of the Windows Hyper-V hardware virtualization system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using specially created data...
Moderate: less security update
The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fixes: less: crafted data can result i...
The vulnerability of the Windows iSCSI Discovery service in the Windows operating system allows a hacker to trigger a service failure.
The vulnerability of the Windows iSCSI Discovery service in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause a service failure using specially created data...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using specially created data...
CVE-2023-32548
OS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can conduct a man-in-the-middle attack connects the product to a malicious server and sends a specially crafted data, an arbitrary OS command may be executed on the system where the product is...
Command injection
OS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can conduct a man-in-the-middle attack connects the product to a malicious server and sends a specially crafted data, an arbitrary OS command may be executed on the system where the product is...
PT-2023-3185 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient input validation in the Windows Hyper-V hardware virtualization system, which can be exploited by a remote attacker to cause a denial of service...
PT-2023-3182 · Microsoft · Windows Iscsi Discovery Service +1
Name of the Vulnerable Software and Affected Versions: Windows iSCSI Discovery Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows iSCSI Discovery Service, which can be exploited by a remote attacker to cause a denial of servic...
PT-2023-23869 · Kingsoft · Wps Office
Name of the Vulnerable Software and Affected Versions: WPS Office version 10.8.0.6186 Description: A remote attacker who can conduct a man-in-the-middle attack may execute an arbitrary OS command on the system where the product is installed by connecting the product to a malicious server and...
The vulnerability of the TCP protocol implementation in the routing mechanism of Juniper Networks’ Junos OS allows a attacker to cause a service failure for the target device.
The vulnerability of the TCP protocol implementation in the routing mechanism of Juniper Networks’ Junos OS is related to incorrect handling of requests. Exploiting this vulnerability allows a malicious actor to cause a service failure for the target device by sending specially crafted data...
CVE-2023-30575
Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentially allowing an attacker to inject Guacamole instructions during the handshake through specially-crafted data...
(0Day) Microsoft 3D Viewer PLY File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft 3D Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
Microsoft Windows Active Directory Certificate Services Improper Authorization Privilege Escalation Vulnerability
This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of Microsoft Windows Active Directory Certificate Services. Authentication is required to exploit this vulnerability. The specific flaw exists within the issuance of certificates. By including...
Command injection in nevado-jms
Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data...
GHSA-7GM3-MWJW-J53W Command injection in nevado-jms
Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data...