CVE-2023-40954

A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar aka webprogress v. 11.0 through 11.0.2, v12.0 through v12.0.2, v.13.0 through v13.0.2, v.14.0 through v14.0.2.1, v.15.0 through v15.0.2, and v16.0 through v16.0.2.1 allows a remote attacker to gain privileges via the recenc...

CVE-2023-40954: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar aka webprogress v. 11.0 through 11.0.2, v12.0 through v12.0.2, v.13.0 through v13.0.2, v.14.0 through v14.0.2.1, v.15.0 through v15.0.2, and v16.0 through v16.0.2.1 allows a remote attacker to gain privileges via the recenc...

PT-2023-35645 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a check failure, specifically in the CheckUnwind function, which leads to a call to iv aligned free and then...

PT-2023-35646 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This error is...

DHCP Server Service Windows DoS

The vulnerability of the DHCP server service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2023-40954

CVE-2023-40954 is a SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar (web_progress) affecting versions 11.0–11.0.2, 12.0–12.0.2, 13.0–13.0.2, 14.0–14.0.2.1, 15.0–15.0.2, and 16.0–16.0.2.1. The issue allows remote attackers to gain privileges via the recency parameter in mod...

CVE-2023-25648

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges...

com.seitenbau.jenkins.plugins:dynamicparameter (0.2.0) potentially affected by CVE-2023-50765 via org.jenkins-ci.plugins:scriptler (2.2)

org.jenkins-ci.plugins:scriptler MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:scriptler and may be impacted: - com.seitenbau.jenkins.plugins:dynamicparameter 0.2.0 Source cves: CVE-2023-50765 Source advisory:...

IBM Informix Dynamic Server Buffer Overflow Vulnerability (CNVD-2023-9769466)

IBM Informix Dynamic Server IDS is a scalable object-relational database server from International Business Machines IBM that provides clustered data centers with features such as continuous data availability and disaster recovery. IBM Informix Dynamic Server suffers from a buffer overflow...

CVE-2023-35643

DHCP Server Service Information Disclosure Vulnerability...

CVE-2023-35643

DHCP Server Service Information Disclosure Vulnerability...

CVE-2023-35638

DHCP Server Service Denial of Service Vulnerability...

CVE-2023-35638

DHCP Server Service Denial of Service Vulnerability...

2023-12 Dynamic Cumulative Update for Windows 11 for x64-based Systems (KB5033369)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

PT-2023-8109 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows operating system's DHCP server service. This can be exploited by a remote attacker to disclose protected...

Microsoft Windows DHCP Server Security Vulnerability

Microsoft Windows is a set of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows DHCP Server. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and editions are...

Crafter CMS Code Execution

The vulnerability of the Crafter CMS content management system is related to insufficient control over resources with dynamic management. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Huawei EulerOS: Security Advisory for gcc (EulerOS-SA-2023-3296)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPC Server Buffer Overflow

The vulnerabilities of the OPC-server software products such as KEPServerEX, ThingWorx Kepware Server, ThingWorx Industrial Connectivity, OPC-Aggregator, ThingWorx Kepware Edge, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server, and Software Toolbox TOP Server are...

CVE-2023-28526

IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251204...