Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the WLAN HAL...

ROS-20230905-01

A vulnerability in the Bluetooth permission verification subsystem of the Linux kernel is associated with errors in the processing of input data. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary commands by sending specially crafted requests...

The vulnerability of the PostPolicyBucket component of the MinIO storage server allows a perpetrator to execute arbitrary code.

The vulnerability of the PostPolicyBucket component of the MinIO storage server is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially crafted HTTP requests...

ROS-20230905-02

Vulnerability in the ksmbd module of Linux kernel operating systems is related to synchronization errors when using a shared resource. synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code using the...

The vulnerability of the SICAM TOOLBOX II engineering software, related to access control errors, allows a intruder to execute arbitrary commands with elevated privileges.

The vulnerability of the SICAM TOOLBOX II engineering software is related to access control errors. Exploiting this vulnerability can allow attackers to execute arbitrary commands with elevated privileges...

PT-2023-4810 · Unknown · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.10.10 XWiki Platform versions prior to 15.4 RC1 Description: The issue is related to errors in authorization, allowing a remote attacker to execute arbitrary web scripts with elevated privileges. In XWiki, ...

CVE-2023-39356

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function gdimultiopaquerect. In particular there is no code to validate if the value...

The vulnerability of the OPC UA Server software for integration systems and automation devices in industrial applications allows a perpetrator to trigger a service failure.

The vulnerability of the OPC UA Server software for integration systems and automation devices in industrial applications is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2023-5774 · Acronis · Acronis Agent +1

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 30600 Acronis Cyber Protect 15 versions prior to build 35979 Description: The issue is related to errors in cryptographic signature verification, allowing for local privilege escalation due to the...

The vulnerability of the microprogrammed software of Moxa’s TN-5900 series routers allows for the execution of arbitrary code.

The vulnerability of Moxa TN-5900 series router microprogramming software is related to errors in the processing of input data during the key generation function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the microprogrammed software of Moxa’s TN-4900 and TN-5900 series routers allows for the execution of arbitrary code.

The vulnerability of Moxa TN-4900 and TN-5900 router microprogramming software is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the microprogrammed software of Moxa’s TN-5900 series routers allows for the execution of arbitrary code.

The vulnerability of Moxa TN-5900 series router microprogramming software is related to errors in processing input data during the certification creation process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DEBIAN-CVE-2023-40184

xrdp is an open source remote desktop protocol RDP server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The authstartsession function can return non-zero 1 value on, e.g., PAM error which may result in in session...

CVE-2023-4522

An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit...

CVE-2023-4522

An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit...

Design/Logic Flaw

An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit...

CVE-2023-4522 Improper Validation of Specified Type of Input in GitLab

An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit...

CVE-2023-4522

Removed by vendor...

CVE-2023-4522

CVE-2023-4522 affects GitLab versions before 16.2.0. The issue causes 500 errors when viewing commits that include directories containing a line feed (LF) character. The description in the connected sources confirms the vulnerable condition but does not provide a confirmed fix in the supplied doc...

The vulnerability of the X509_VERIFY_PARAM_add0_policy() function in the OpenSSL library allows a attacker to perform a man-in-the-middle attack.

The vulnerability of the X509VERIFYPARAMadd0policy function in the OpenSSL library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...