2010 matches found
USN-6201-1 firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2023-37201, CVE-2023-37202,...
CVE-2023-32386
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to observe unprotected user data...
PT-2023-23701 · Tellus +1 · Tellus +1
Name of the Vulnerable Software and Affected Versions: TELLUS version 4.0.15.0 TELLUS Lite version 4.0.15.0 Description: An out-of-bounds read issue exists, potentially leading to information disclosure and/or arbitrary code execution when opening a specially crafted SIM file. Recommendations: Fo...
Siemens Solid Edge
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2023-29541
The CVE-2023-29541 issue concerns Firefox on Linux (and Thunderbird) where downloads of files ending with .desktop could be interpreted as commands, enabling attacker-controlled execution. Public advisories show affected products as Firefox (Linux) older than 112, Thunderbird older than 102.10, a...
Barracuda Warns of Zero-Day Exploited to Breach Email Security Gateway Appliances
Email protection and network security services provider Barracuda is warning users about a zero-day flaw that it said has been exploited to breach the company's Email Security Gateway ESG appliances. The zero-day is being tracked as CVE-2023-2868 and has been described as a remote code injection...
PT-2023-23791 · Apple · Ios +2
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.6 iPadOS versions prior to 16.6 Description: The issue was addressed with improvements to the file handling protocol. An app may be able to break out of its sandbox. Recommendations: For iOS versions prior to 16.6,...
GO-2023-1737 Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin
The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. For example, a filename of...
SUSE-SU-2023:2164-1 Security update for cloud-init
This update for cloud-init contains following fixes: - CVE-2021-3429: Do not write the generated password to the log file. bsc1184758 - CVE-2023-1786: Do not expose sensitive data gathered from the CSP. bsc1210277 Other fixes: - Change log file creation mode to 640. bsc1183939 - Write proper...
FunAdmin 跨站脚本漏洞
FunAdmin is FunAdmin open source based on ThinkPHP6+Layui development of a lightweight high-profile backend development system . FunAdmin version 3.2.3 and previous versions of cross-site scripting vulnerability , the vulnerability stems from the wrong operation of the parameter file leads to...
SAP BusinessObjects Business Intelligence Platform Information Disclosure Vulnerability (CNVD-2023-40166)
SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. A security vulnerability exists in SAP BusinessObjects Business Intelligence Platform lcmbiar file handling, which can be exploited by a remote attacker to submit a special request that could...
Mozilla Thunderbird < 102.10
The version of Thunderbird installed on the remote Windows host is prior to 102.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-15 advisory. - Mozilla developers Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the Mozilla Fuzzing Team reported memor...
tpAdmin 代码问题漏洞
tpAdmin is a ThinkPHP5 based administration backend. A code issue vulnerability exists in yuan1994 tpAdmin version 1.3.12, which stems from an incorrect manipulation of the parameter file resulting in unrestricted uploads...
Fedora: Security Advisory for zchunk (FEDORA-2023-5a4fd08de9)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5996-1 liblouis vulnerabilities
It was discovered that Liblouis incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. CVE-2023-26767, CVE-2023-26768, CVE-2023-26769...
Active eCommerce CMS 6.5.0 - Stored Cross-Site Scripting Vulnerability
Exploit Title: Active eCommerce CMS 6.5.0 - Stored Cross-Site Scripting XSS Exploit Author: Sajibe Kanti Vendor Name: ActiveITzone Vendor Homepage: https://activeitzone.com/ Software Link: https://codecanyon.net/item/active-ecommerce-cms/23471405 Version: 6.5.0 Tested on: Live Centos & Litespeed...
Active eCommerce CMS 6.5.0 - Stored Cross-Site Scripting (XSS)
Exploit Title: Active eCommerce CMS 6.5.0 - Stored Cross-Site Scripting XSS Date: 19/01/2023 Exploit Author: Sajibe Kanti Vendor Name: ActiveITzone Vendor Homepage: https://activeitzone.com/ Software Link: https://codecanyon.net/item/active-ecommerce-cms/23471405 Version: 6.5.0 Tested on: Live...
CVE-2023-1177 Path Traversal: '\..\filename' in mlflow/mlflow
Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1...
Debian: Security Advisory (DLA-20-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
