PT-2024-1437 · Delta Electronics · Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Industrial Automation DOPSoft affected versions not specified Description: A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote,...

Delta Electronics DOPSoft Security Vulnerability

Delta Electronics DOPSoft is a set of Human Machine Interface HMI software from Delta Electronics, Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft that originates from a buffer overflow vulnerability when parsing the wKPFStringLen field of a DPS file...

Low: curl

Issue Overview: When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use. CVE-2023-46219 Affected Packages: curl Issue Correction: Run dnf update curl --releasev...

DEBIAN-CVE-2023-49342

Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false...

PT-2023-31175 · Unknown +3 · Budgie Extras +3

Name of the Vulnerable Software and Affected Versions: Budgie Extras affected versions not specified Description: Temporary data passed between application components by the Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in a location that is...

CLSA-2023-1702324842 Fix CVE(s): CVE-2023-23583

SECURITY UPDATE: New microcode data file 2023-11-14 - Updated microcodes: sig 0x000606a6, pfmask 0x87, 2023-09-01, rev 0xd0003b9, size 299008 sig 0x000606c1, pfmask 0x10, 2023-09-08, rev 0x1000268, size 290816 sig 0x000706e5, pfmask 0x80, 2023-09-03, rev 0x00c2, size 113664 sig 0x000806c1, pfmask...

CVE-2023-6306

A vulnerability classified as critical has been found in SourceCodester Free and Open Source Inventory Management System 1.0. Affected is an unknown function of the file /ample/app/ajax/memberdata.php. The manipulation of the argument columns leads to sql injection. It is possible to launch the...

PT-2023-32606 · Unknown · Sourcecodester Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free and Open Source Inventory Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /ample/app/ajax/member data.php. The manipulation of the columns argument...

CVE-2023-5136

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file...

CVE-2023-5136

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file...

Information disclosure

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file...

CVE-2023-5136 Incorrect Permission Assignment in the TopoGrafix DataPlugin for GPX

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file...

CVE-2023-5136 Incorrect Permission Assignment in the TopoGrafix DataPlugin for GPX

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file...

CVE-2023-5136

The connected advisories confirm a vulnerability in NI DIAdem GPX processing via the TopoGrafix DataPlugin for GPX. The root cause is an XML External Entity (XXE) handling flaw that allows a crafted GPX file to cause the XML parser to fetch and embed external content, leading to information discl...

CLSA-2023-1693419791 Fix CVE(s): CVE-2022-40982, CVE-2023-23908, CVE-2022-41804

SECURITY UPDATE: New microcode data file 2023-08-08 - Updated microcodes: sig 0x00050653, pfmask 0x97, 2023-03-23, rev 0x1000181, size 36864 sig 0x00050654, pfmask 0xb7, 2023-03-06, rev 0x2007006, size 44032 sig 0x00050656, pfmask 0xbf, 2023-03-17, rev 0x4003604, size 38912 sig 0x00050657, pfmask...

CLSA-2023-1693419056 Fix CVE(s): CVE-2022-41804, CVE-2023-23908, CVE-2022-40982

SECURITY UPDATE: New microcode data file 2023-08-08 - Updated microcodes: sig 0x00050653, pfmask 0x97, 2023-03-23, rev 0x1000181, size 36864 sig 0x00050654, pfmask 0xb7, 2023-03-06, rev 0x2007006, size 44032 sig 0x00050656, pfmask 0xbf, 2023-03-17, rev 0x4003604, size 38912 sig 0x00050657, pfmask...

PT-2023-29578 · Unknown · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Inventory Management System. The issue affects an unknown functionality of the file staff data.php. The manipulation ...

CVE-2023-36281

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...

PYSEC-2023-151

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the loadprompt parameter...

CVE-2023-39419

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 7. The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the...