SUSE CVE-2022-21949

A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue...

SUSE CVE-2022-23123

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getdirparams method. The issue results from the lack of proper validation of...

SUSE CVE-2022-46698

A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may disclose sensitive user information...

CVE-2023-24565

A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All versions V223.0Update2. The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted STL file...

PT-2023-6756 · Mendix · Mendix

Name of the Vulnerable Software and Affected Versions: Mendix versions prior to 7.23.34 Mendix versions prior to 8.18.23 Mendix versions prior to 9.22.0 Mendix 9.12 versions prior to 9.12.10 Mendix 9.18 versions prior to 9.18.4 Mendix 9.6 versions prior to 9.6.15 Description: The issue is related...

PT-2023-3242 · Siemens +1 · Siemens Solid Edge +1

Name of the Vulnerable Software and Affected Versions: Datakit CrossCadWare x64.dll affected versions not specified Description: The issue is related to an out-of-bounds read past the end of an allocated buffer in the Datakit CrossCadWare x64.dll library when parsing a specially crafted SLDPRT...

PT-2023-9408 · Intel +4 · Intel Processors +4

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions, which may allow a privileged user to...

USN-5866-1 nova vulnerabilities

It was discovered that Nova did not properly manage data logged into the log file. An attacker with read access to the service's logs could exploit this issue and may obtain sensitive information. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. CVE-2015-9543 It was discovered that...

CVE-2023-22349

Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing screen management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information...

CVE-2023-22350

Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing parts management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information...

The vulnerability of the SoMachine and EcoStruxure Machine Expert programming devices lies in the lack of protection for operational data, which allows attackers to disclose the protected information.

The vulnerability of the SoMachine and EcoStruxure Machine Expert logic controller programs lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sending certain messages to the server’s TCP port through th...

The vulnerability of the Openstack Cinder block storage service lies in its reliance on files and directories accessible from external parties, allowing an attacker to expose protected information.

The vulnerability of the Openstack Cinder block storage service is related to the use of files and directories accessible to external parties. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

Acronis Agent 安全漏洞

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent Windows versions prior to 30161, Acronis Cyber Protect 15 Windows versions prior to 30984, which originates from improperly set folder permissions. An attacker could exploit the vulnerabili...

PT-2023-18444

Name of the Vulnerable Software and Affected Versions Screen Creator Advance 2 versions 0.1.1.4 Build01 and earlier Description An out-of-bound write issue exists due to a lack of error handling when out of specification errors are detected. This could lead to information disclosure and/or...

Best Online News Portal 安全漏洞

Best online news portal is an online news portal by Mayuri K. Individual developer. A security vulnerability exists in version 1.0 of Best Online News Portal, which stems from a problem with an unknown function in the file checkavailability.php, where manipulation of the parameter username can le...

Qualcomm 芯片安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm chip wlan driver, which stem...

CVE-2022-40691

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-40693

A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability...

HackerOne: [CVE-2022-44268] Arbitrary Remote Leak via ImageMagick

A Local File Inclusion vulnerability was discovered in an outdated version of ImageMagick used for image resizing on a website. An attacker could exploit this vulnerability by uploading a malicious PNG image, which would include the local file as content of the resized image in a hexadecimal...

Mitsubishi Electric GOT2000 和GT SoftGOT2000 安全漏洞

Mitsubishi Electric GOT2000 and Mitsubishi Electric GT SoftGOT2000 are both products of Mitsubishi Electric Japan.Mitsubishi Electric GOT2000 is a GOT2000 series Mitsubishi Electric GT SoftGOT2000 is an HMI software that runs on PCs and computers. It can monitor and operate the information of FA...