CVE-2023-43986

CVE-2023-43986 affects DM Concept configurator prior to v4.9.4. The vulnerability is a SQL injection in the ConfiguratorAttachment::getAttachmentByToken component, leading to potential compromise of data confidentiality, integrity, and availability as indicated by the CVSS metrics. Affected versi...

PT-2023-29060 · Unknown · Dm Concept Configurator

Name of the Vulnerable Software and Affected Versions: DM Concept configurator versions prior to 4.9.4 Description: The issue is related to a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken. Recommendations: For versions prior to 4.9.4, update to version...

DM Concept configurator SQL Injection Vulnerability

DM Concept configurator is an application from DM Concept, Inc. A security vulnerability exists in DM Concept configurator versions prior to v4.9.4 that stems from a SQL injection vulnerability in the component ConfiguratorAttachment...

Privilege Escalation

mattermost is vulnerable to privilege escalation. An attacker with system role permission can read DM conversations...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Mattermost Incorrect Authorization vulnerability

Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a DM conversation...

GHSA-H8WH-F7GW-FWPR Mattermost Incorrect Authorization vulnerability

Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a DM conversation...

CVE-2023-5193

Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a DM conversation...

Design/Logic Flaw

Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a DM conversation...

CVE-2023-5193

Mattermost CVE-2023-5193 describes a permissions flaw where a System Role with the permission to manage channels can read posts in direct messages due to improper permission checks. The issue has been associated with Mattermost Server versions prior to 7.8.10, 8.0.x prior to 8.0.2, and 8.1.0 (per...

CVE-2023-5193 System Role with manage posts permission can read posts of Direct Messages

Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a DM conversation...

CVE-2023-5193 System Role with manage posts permission can read posts of Direct Messages

Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a DM conversation...

CVE-2023-5193: Incorrect Authorization

Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a DM conversation...

Unbreakable Enterprise kernel security update

4.14.35-2047.529.3 - uek-rpm: Update kernel linux-firmware dependency to 20230516-999.26.git6c9e0ed5. Somasundaram Krishnasamy Orabug: 35724203 - LTS version: v4.14.322 Saeed Mirzamohammadi - drm/edid: fix objtool warning in drmcvtmodes Linus Torvalds - mtd: rawnand: omapelm: Fix incorrect type i...

Damon Enterprise Manager (DEM) suffers from a logic flaw vulnerability (CNVD-2023-78062)

Damon Enterprise Manager DEM is a centralized management platform that monitors, manages and maintains DM databases through a web interface. A logic flaw vulnerability exists in Damon Enterprise Manager DEM, which can be exploited by an attacker to delete arbitrary files...

Command execution vulnerability in Damon Enterprise Manager (DEM) (CNVD-2023-69447)

Damon Enterprise Manager DEM is a centralized management platform that monitors, manages and maintains DM databases through a web interface. A command execution vulnerability exists in Damon Enterprise Manager DEM, which can be exploited by an attacker to gain control of the server...

OracleVM 3.4 : kernel-uek (OVMSA-2023-0017)

The remote OracleVM system is missing necessary patches to address security updates: - A use-after-free flaw was found in the Linux kernel's Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user ...

CVE-2023-30917

In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

Unbreakable Enterprise kernel security update

4.1.12-124.76.2 - firewire: fix potential uaf in outboundphypacketcallback Chengfeng Ye Orabug: 35493606 CVE-2023-3159 - ath9k: fix use-after-free in ath9khifusbrxcb Pavel Skripkin Orabug: 35448003 CVE-2022-1679 - dm ioctl: fix nested locking in tableclear to remove deadlock concern Mike Snitzer...

EulerOS Virtualization 3.0.6.0 : kernel (EulerOS-SA-2023-2252)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead t...