CVE-2023-21141

In several functions of several files, there is a possible way to access developer mode traces due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-23841

SolarWinds Serv-U exposes sensitive information via an HTTP request when updating File Share/File request attributes. Part of the request URL leaks data. Affected product: SolarWinds Serv‑U File Server (versions prior to 15.4 per vendor advisory). CVSSv3.1 base score 7.5 (HIGH) with NETWORK reach...

SolarWinds Serv-U File Server 安全漏洞

SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A security vulnerability exists in SolarWinds Serv-U File Server version 15.3.2 and earlier, which originates from submitting an HTTP request when changing or updating the properties of a file share or a file request,...

CVE-2022-31641

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure...

CVE-2022-31640

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure...

cri-o: incorrect handling of the supplementary groups

Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute...

HP PC 安全漏洞

HP PC is a computer product of Hewlett-Packard HP Company, USA. A security vulnerability exists in the HP PC BIOS that originates from allowing arbitrary code execution, privilege escalation, denial of service, and information disclosure...

HP PC 安全漏洞

HP PC is a computer product of Hewlett-Packard HP Company, USA. A security vulnerability exists in the HP PC BIOS that originates from allowing arbitrary code execution, privilege escalation, denial of service, and information disclosure...

PT-2023-24621 · WordPress · Woocommerce Stripe Payment Gateway

Name of the Vulnerable Software and Affected Versions: WooCommerce Stripe Payment Gateway plugin versions prior to 7.4.1 Description: A security issue has been identified that could lead to the unauthorized disclosure of sensitive information, specifically a PII disclosure due to an unauthenticat...

CVE-2022-31638

Potential time-of-check to time-of-use TOCTOU vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure...

CVE-2023-29167

Out-of-bound reads vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information on the system where the affected product is installed may be disclosed or arbitrary code may be executed...

CVE-2023-29498

Improper restriction of XML external entity reference XXE vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier. If a user opens a specially crafted project file, sensitive information on the system where the affected product is installed may be disclosed...

CVE-2023-29160

Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information on the system where the affected product is installed may be disclosed or arbitrary code may be executed...

CVE-2023-29167

Out-of-bound reads vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information on the system where the affected product is installed may be disclosed or arbitrary code may be executed...

CVE-2023-29160

Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information on the system where the affected product is installed may be disclosed or arbitrary code may be executed...

CVE-2023-33122

A vulnerability has been identified in JT2Go All versions V14.2.0.3, Teamcenter Visualization V13.2 All versions V13.2.0.13, Teamcenter Visualization V13.3 All versions V13.3.0.10, Teamcenter Visualization V14.0 All versions V14.0.0.6, Teamcenter Visualization V14.1 All versions V14.1.0.8,...

PT-2023-22282 · Unknown · Frenic Rhc Loader

Name of the Vulnerable Software and Affected Versions: FRENIC RHC Loader versions 1.1.0.3 and earlier Description: An issue exists due to improper restriction of XML external entity reference XXE, which may lead to the disclosure of sensitive information on the system where the affected product i...

HP PC 安全漏洞

HP PC is a computer product of Hewlett-Packard HP, an American company. A security vulnerability exists in the HP PC BIOS. An attacker could exploit the vulnerability to execute arbitrary code, privilege escalation, denial of service, and information disclosure...

PT-2023-13045 · Hewlett Packard · Hp Pc

Name of the Vulnerable Software and Affected Versions: HP PC products affected versions not specified Description: Potential time-of-check to time-of-use TOCTOU vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of...

CVE-2022-27541

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...