Design/Logic Flaw

Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining CBC mode in AES encryption. This vulnerability can lead to the disclosure of information and communications...

CVE-2023-6121 Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer...

CVE-2023-6121 Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer...

CVE-2023-4771

A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information...

The vulnerability of the XML data security platform in Java applications arises from XML Apache Santuario. This issue is related to errors in transmitting the “secureValidation” property during the creation of a KeyInfo object from a KeyInfoReference element. This vulnerability allows attackers to gain access to any .xml files.

The vulnerability of the XML data security platform in Java applications is related to errors in transmitting the “secureValidation” property during the creation of a KeyInfo object from a KeyInfoReference element. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

Teacher Subject Allocation Management System teacher-info.php File SQL Injection Vulnerability

Teacher Subject Allocation Management System a teacher subject allocation management system. The Teacher Subject Allocation Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the editid parameter of...

CVE-2023-39199

CVE-2023-39199 is described across multiple sources as a cryptographic issue in Zoom’s In-Meeting/ conference chat that may allow a privileged user to disclose information via network access. The NVD entry notes a confidentiality impact (high) with network attack vector and low attack complexity;...

CVE-2023-24588

Exposure of sensitive information to an unauthorized actor in firmware for some IntelR OptaneTM SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access...

Code injection

Uncontrolled search path element in some IntelR Server Information Retrieval Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-36406

CVE-2023-36406 is described in the NVD as a Windows Hyper-V Information Disclosure vulnerability with CVSS v3.1 base score 5.5 (Local, Low complexity, Privileges required: Low, User interaction: None; Confidentiality Impact: High). The connected documents note Microsoft security updates (KB503219...

CVE-2023-36043 Open Management Infrastructure Information Disclosure Vulnerability

...

kernel: usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()

In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhciallocstreaminfo xhciallocstreaminfo allocates stream context array for streaminfo -streamctxarray with xhciallocstreamctx. When some error occurs, streaminfo-streamctxarray is not...

kernel: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmfgetassocies Fix a slab-out-of-bounds read that occurs in kmemdup called from brcmfgetassocies. The bug could occur when associnfo-reqlen, data from a URB provided by a USB device, i...

kernel: wifi: iwlwifi: fw: fix memory leak in debugfs

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix a memory leak that occurs when reading the fwinfo file all the way, since we return NULL indicating no more data, but don't free the status tracking object...

kernel: Linux kernel: Memory leak in driver core location can lead to denial of service

A flaw was found in the Linux kernel. This memory leak vulnerability exists in the driver core location component, where the acpipldinfo structure is not properly freed upon allocation failure. A local attacker could exploit this flaw to cause a denial of service DoS due to resource exhaustion...

CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

PYSEC-2023-237

An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack...

UBUNTU-CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

The vulnerability of the _bfd_dwarf2_slurpdebug_info function in the bfd/dwarf2.c component of the GNU Binutils development environment allows a hacker to cause a service failure.

The vulnerability of the bfddwarf2slurpdebuginfo function in the bfd/dwarf2.c component of the GNU Binutils development environment is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause service interruptions...