Lucene search
+L

7717 matches found

Cvelist
Cvelist
added 2023/11/16 10:11 a.m.39 views

CVE-2023-44345 Adobe InDesign CC 2023 Memory Corruption Vulnerability VII.

Adobe InDesign versions ID18.5 and earlier and ID17.4.2 and earlier are affected by a Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue...

5.5CVSS5.4AI score0.00313EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/16 10:11 a.m.77 views

CVE-2023-44345

CVE-2023-44345 affects Adobe InDesign versions ID18.5 and earlier and ID17.4.2 and earlier. The issue is improper input validation causing application denial-of-service under the current user, with exploitation requiring user interaction (victim opens a malicious file). Connected documents corrob...

5.5CVSS5.1AI score0.00313EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/16 10:11 a.m.18 views

CVE-2023-44345 Adobe InDesign CC 2023 Memory Corruption Vulnerability VII.

Adobe InDesign versions ID18.5 and earlier and ID17.4.2 and earlier are affected by a Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue...

5.5CVSS6.2AI score0.00313EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/16 9:15 a.m.11 views

CVE-2023-32469

Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution...

6.7CVSS6AI score0.00217EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/11/16 12:00 a.m.34 views

Mageia: Security Advisory (MGASA-2023-0319)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS7AI score0.05848EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2023/11/16 12:00 a.m.11 views

PT-2023-23810 · Dell · Dell Precision Tower Bios

Name of the Vulnerable Software and Affected Versions: Dell Precision Tower BIOS affected versions not specified Description: The issue is related to an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerabili...

7.5CVSS6.7AI score0.00217EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/11/16 12:00 a.m.54 views

Oracle Linux 9 : pcs / (LOW) (ELSA-2023-6316)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6316 advisory. 0.11.6-3 - Refreshing any page in pcs-web-ui no longer causes it to display a blank page - Resolves: rhbz2222788 0.11.6-2 - Added BuildRequires: debugedit - for...

7.5CVSS6.9AI score0.23789EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/11/15 3:49 p.m.45 views

Security Bulletin: IBM TRIRIGA Application Platform discloses server-side request forgery (CVE-2020-11988)

Summary CV-2020-11988 Apache XML Graphis Commons is vulerable to server-side request forgery. Vulnerability Details CVEID: CVE-2020-11988 DESCRIPTION: Apache XML Graphics Commons is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a...

8.2CVSS6.8AI score0.0665EPSS
SaveExploits0Affected Software1
Veracode
Veracode
added 2023/11/15 3:02 p.m.23 views

Improper Input Validation

K8s.io/kubernetes is vulnerable to Improper Input Validation. The vulnerability exists due to insufficient input sanitization in the in-tree storage plugin for Windows nodes in mountwindows.go, allowing an attacker to bypass admin privileges on this node...

8.8CVSS7.1AI score0.03578EPSS
SaveExploits0References16Affected Software2
Mageia
Mageia
added 2023/11/15 11:35 a.m.86 views

Updated tomcat packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error cou...

5.3CVSS6.5AI score0.05848EPSS
SaveExploits2References3
NVD
NVD
added 2023/11/15 11:15 a.m.23 views

CVE-2023-23549

Improper Input Validation in Checkmk 2.2.0p15, 2.1.0p37, =2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames...

2.7CVSS0.00648EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/15 11:07 a.m.69 views

CVE-2023-23549

CVE-2023-23549 affects Checkmk installations running <2.2.0p15, <2.1.0p37, or

2.7CVSS3.3AI score0.00648EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/15 11:07 a.m.10 views

CVE-2023-23549 DoS via long hostnames

Improper Input Validation in Checkmk 2.2.0p15, 2.1.0p37, =2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames...

2.7CVSS6.5AI score0.00648EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/15 11:07 a.m.29 views

CVE-2023-23549 DoS via long hostnames

Improper Input Validation in Checkmk 2.2.0p15, 2.1.0p37, =2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames...

2.7CVSS4.3AI score0.00648EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/14 7:15 p.m.14 views

CVE-2023-32641

Improper input validation in firmware for IntelR QAT before version QAT20.L.1.0.40-00004 may allow escalation of privilege and denial of service via adjacent access...

8.8CVSS5.8AI score0.0031EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/14 7:15 p.m.12 views

CVE-2023-20596

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution...

9.8CVSS5.9AI score0.01045EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/11/14 7:15 p.m.37 views

CVE-2023-31203

Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access...

7.5CVSS7.1AI score0.00625EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/11/14 7:04 p.m.5 views

CVE-2023-27519

Improper input validation in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable escalation of privilege via local access...

6.9CVSS7.4AI score0.0022EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/14 6:33 p.m.90 views

CVE-2023-32701

CVE-2023-32701 affects BlackBerry QNX SDP Networking Stack in SDP versions 6.6, 7.0, and 7.1. Root cause: improper input validation in the networking stack. Impact includes information disclosure and Denial-of-Service. Exploitation details are not provided in the documents; local access with low ...

7.1CVSS6.7AI score0.00239EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/14 6:33 p.m.28 views

CVE-2023-32701 Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP)

Improper Input Validation in the Networking Stack of QNX SDP versions 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition...

7.1CVSS6.9AI score0.00239EPSS
SaveExploits0References1
Rows per page
Query Builder