14677 matches found
SA44508 - 2020-06: Out-of-Cycle Advisory: Multiple Vulnerabilities in Treck TCP/IP Embedded Software
Last Modified Date Mar 4, 2024 5:58:50 PM...
PT-2023-1627
Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 12.0.3 and earlier Adobe Bridge versions 13.0.1 and earlier Description The issue is related to improper input validation when handling embedded fonts, which could result in arbitrary code execution in the context of the...
PT-2023-1623
Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 12.0.3 and earlier Adobe Bridge versions 13.0.1 and earlier Description The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. This...
PT-2023-1622 · Adobe · Bridge
Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.3 and earlier Adobe Bridge versions 13.0.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. This vulnerability can be exploited ...
KB5022894: Windows 8.1 Embedded and Windows Server 2012 R2 Security Update (February 2023)
The remote Windows host is missing security update 5022894. It is, therefore, affected by multiple vulnerabilities - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability CVE-2023-21684, CVE-2023-21801 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...
Code injection
Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a specially crafted packet to the vulnerable interface, an attacker can modify the device system time...
CVE-2022-30564
CVE-2022-30564 concerns some Dahua embedded products where an attacker can perform unauthorized modification of the device timestamp by sending a specially crafted packet to a vulnerable interface. The vulnerability is described with a CVE entry and corroborating references (NVD, Red Hat, Tenable...
CVE-2022-30564: Improper Access Control
Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a specially crafted packet to the vulnerable interface, an attacker can modify the device system time...
PT-2023-13014
Name of the Vulnerable Software and Affected Versions Dahua embedded products affected versions not specified Description The issue allows for unauthorized modification of the device timestamp. An attacker can exploit this by sending a specially crafted packet to the vulnerable interface, thereby...
[SECURITY] Fedora 37 Update: binwalk-2.3.3-3.fc37
Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded inside of firmware images. Binwalk uses the python-magic library, so it is compatible with magic signatures created for the Unix file...
Design/Logic Flaw
Discourse is an open source discussion platform. The embeddable comments can be exploited to create new topics as any user but without any clear title or content. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. As a workaround, disable embeddable comments ...
CVE-2023-23088
Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...
Malware in hellosign-embedded-cla
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2023-496 Malicious code in hellosign-embedded-cla (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e040d099ac8087da48a2e03051478f6929f6ccc2c841992999d9160c6d8ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hellosign-embedded-cla (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e040d099ac8087da48a2e03051478f6929f6ccc2c841992999d9160c6d8ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Design/Logic Flaw
Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Express API is impacted. The problem has been resolved. Users should upgrade to version 2.0.0. As a workaround, don't pass user supplied things directly to res.render...
CVE-2023-23630
CVE-2023-23630 affects Eta, a JS templating engine used with Node/Express; the XSS vulnerability exists when user-supplied data is passed to res.render. Root cause is improper handling of input leading to script injection. The issue has been fixed in Eta v2.0.0. Workarounds include not passing us...
Eta Cross-Site Scripting Vulnerability
Eta is Eta open source a lightweight , fast embedded JS template engine . Can run in Node, Deno and browser . A cross-site scripting vulnerability exists in Eta. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
Dell BIOS buffer error vulnerability
The Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from the presence of a heap buffer overflow vulnerability that could be exploited by a local attacker with administrator privileges to perform...