13475 matches found
cargo-generate (>=0.13.1, <=0.16.0), cargo-smart-release (>=0.1.0, <=0.2.4) +44 more potentially affected by unknown CVE via git-hash (>=0.1.2, <=0.10.3)
git-hash CARGO version =0.1.2, =0.13.1, =0.1.0, =0.2.11, =11.0.0, =0.12.11, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.1.0, =0.4.3 - git-lock 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0025...
Description of the security update for SharePoint Foundation 2013: March 14, 2023 (KB5002367)
Description of the security update for SharePoint Foundation 2013: March 14, 2023 KB5002367 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-23395...
Description of the security update for SharePoint Enterprise Server 2016: March 14, 2023 (KB5002368)
None None...
Description of the security update for Outlook 2016: March 14, 2023 (KB5002254)
None None...
Description of the security update for Office 2013: March 14, 2023 (KB5002198)
Description of the security update for Office 2013: March 14, 2023 KB5002198 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-23399. Note: To apply this...
Description of the security update for Office Web Apps Server 2013: March 14, 2023 (KB5002362)
None None...
Description of the security update for Office Online Server: March 14, 2023 (KB5002356)
None None...
Description of the security update for Excel 2013: March 14, 2023 (KB5002348)
Description of the security update for Excel 2013: March 14, 2023 KB5002348 Summary This security update resolves a Microsoft Excel spoofing vulnerability and Microsoft Excel remote code execution vulnerability. To learn more about the vulnerabilities, see the following security advisories:...
Description of the security update for Office 2016: March 14, 2023 (KB5002197)
None None...
Description of the security update for Outlook 2013: March 14, 2023 (KB5002265)
Description of the security update for Outlook 2013: March 14, 2023 KB5002265 Summary This security update resolves a Microsoft Outlook elevation of privilege vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-23397. Note: To apply th...
PT-2023-36086 · Gitoxide · Gitoxide
Name of the Vulnerable Software and Affected Versions: gitoxide project affected versions not specified Description: The gitoxide project has undergone a renaming of its crates from git- to gix-, with the git- prefixed crates no longer being updated. Recommendations: To continue receiving updates...
CVE-2023-27580 CodeIgniter Shield Password Shucking Vulnerability
CodeIgniter Shield provides authentication and authorization for the CodeIgniter 4 PHP framework. An improper implementation was found in the password storage process. All hashed passwords stored in Shield v1.0.0-beta.3 or earlier are easier to crack than expected due to the vulnerability...
PT-2023-21223 · Unknown · Codeigniter Shield
Name of the Vulnerable Software and Affected Versions: CodeIgniter Shield versions 1.0.0-beta.3 and earlier Description: An improper implementation was found in the password storage process, making all hashed passwords stored in affected versions easier to crack than expected. If an attacker...
FluentCRM - Marketing Automation For WordPress < 2.8.0 - Unauthenticated Subscriptions Update
The plugin does not properly secure the use of MD5 hash without a salt to control subscriptions, making it possible for unauthenticated attackers to unsubscribe users from lists and manage subscriptions...
SQL Injection
zoneminder is vulnerable to SQL Injection attacks. An attacker could use a malicious JWT token to execute SQL queries, as the Username field of the JWT token was trusted. If the HASH key used by ZoneMinder was determined, the attacker could generate a malicious JWT token and use it to execute...
CLSA-2023-1678396156 php: Fix of 3 CVEs
CVE-2023-0567: crypt: Fix validation of malformed BCrypt hashes - CVE-2023-0568: Fix array overrun when appending slash to paths - CVE-2023-0662: Fix DoS vulnerability when parsing multipart request body...
CLSA-2023-1678395661 php: Fix of 3 CVEs
CVE-2023-0567: crypt: Fix validation of malformed BCrypt hashes - CVE-2023-0568: Fix array overrun when appending slash to paths - CVE-2023-0662: Fix DoS vulnerability when parsing multipart request body...
xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow
A flaw was found in the xstream package. This flaw allows an attacker to cause a denial of service by injecting recursive collections or maps, raising a stack overflow...
CVE-2021-33353
creationtimestamp| type| source ---|---|--- 2023-03-09 00:23:18+00:00| seen| https://t.me/cibsecurity/59704 2025-03-04 21:35:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6443...
Froxlor 安全漏洞
Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in Froxlor versions prior to 2.0.13, which stems from the ability to log in with a password that is stored in the database as an MD5 hash, leading to type obfuscation in PHP, which can be...