EulerOS Virtualization 3.0.6.0 : cloud-init (EulerOS-SA-2023-3422)

According to the versions of the cloud-init package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. Th...

EulerOS 2.0 SP11 : cloud-init (EulerOS-SA-2023-2838)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could...

EulerOS 2.0 SP8 : cloud-init (EulerOS-SA-2023-3116)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could...

WordPress InstaWP Connect Plugin <= 0.1.0.8 is vulnerable to Privilege Escalation

Software InstaWP Connect Type Plugin Vulnerable versions = 0.1.0.8 Fixed in 0.1.0.9 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-22145 Patch priority High CVSS severity High 8.8 Developer InstaWP PSID f661e38694ec Credits Majed Refae...

The vulnerability of the Microsoft .NET Framework software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Windows Local Session Manager component of the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Windows Local Session Manager component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the HTTP2 protocol implementation (network/access/http2/hpacktable.cpp) in the cross-platform development framework for Qt software allows a perpetrator to cause service failures.

The vulnerability of the HTTP2 protocol implementation network/access/http2/hpacktable.cpp of the cross-platform development framework for Qt is related to a numerical overflow caused by changes to the typical expression order in conditional operators “Yoda conditions”. Exploiting this...

The vulnerability of the APDU Frame Layout Handler component in Hitachi Energy RTU500 CMU series programmable logic controllers allows a attacker to trigger a service failure.

The vulnerability of the APDU Frame Layout Handler component in Hitachi Energy RTU500 CMU series programmable logic controllers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to trigger service failures by sending...

CVE-2023-7027

The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘device’ header in all versions up to, and including, 2.8.7 due to insufficient input sanitization and output escaping. This...

The vulnerability of the Microsoft Defender software arises from insufficient validation of input data, allowing a perpetrator to trigger a service failure.

The vulnerability of the Microsoft Defender software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using specially crafted input data...

WordPress Checkout Mestres WP Plugin <= 7.1.9.7 is vulnerable to Privilege Escalation

Software Checkout Mestres WP Type Plugin Vulnerable versions = 7.1.9.7 Fixed in 7.1.9.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51472 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 9fb8ab95cc18 Credits...

The vulnerability of the Django web application software lies in the fact that code is loaded without any checks for its integrity. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Django web application framework lies in the fact that code is loaded without any checks for its integrity. Exploiting this vulnerability allows an attacker to gain access to sensitive data, compromise its integrity, and cause service failures...

The vulnerability of the Expat XML parsing library lies in the improper limitation on XML references to external objects. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Expat XML parsing library is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the `chunk_free_object` function in the `gsmchunk.c` component of the Ghostscript software suite allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the chunkfreeobject function in the gsmchunk.c component of the Ghostscript document processing software lies in the handling of buffer overflows. Exploitation of this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even...

The vulnerability of the Zabbix universal monitoring system, related to logging beyond buffer boundaries, allows a intruder to trigger a service failure.

The vulnerability of the Zabbix universal monitoring system is related to logging beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the Django web application platform, related to uncontrolled resource consumption, allows attackers to trigger service failures.

The vulnerability of the Django web application framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Apache Dubbo RPC framework, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the Apache Dubbo RPC framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the engineer mode of Unisoc microprogrammed software processors allows a hacker to trigger a service failure.

The vulnerability of the engineer mode of Unisoc microprogrammed chipset software is related to unverified array indexing. Exploiting this vulnerability can allow attackers to cause service failures...

AZL-32199 CVE-2023-6918 affecting package libssh for versions less than 0.10.6-1

A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the...

CVE-2023-6918

A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the...