CVE-2023-33993

B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep knowledge to send crafted queries over the network to read or modify the SQL data. On successful exploitation, the attacker can cause high impact on confidentiality, integrity and availability of the...

SUSE CVE-2023-3347

A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, suc...

The vulnerability of the `systemctl status` command for the Systemd service initialization and management subsystem allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the systemctl status command for the Systemd service initialization and management subsystem is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

The vulnerability of the Google Chrome browser’s guest mode allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s guest mode is related to buffer overflows and the installation of malicious extensions. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service interruptions through a specially...

The vulnerability of the Runc command-line tool for running isolated containers, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Runc container launch tool is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to access confidential data, compromise its integrity, and cause service failures...

CVE-2023-0201

NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure...

NVIDIA DGX-2 缓冲区错误漏洞

The NVIDIA DGX-2 is a high-performance workstation for deep learning from NVIDIA, Inc. The NVIDIA DGX-2™ is NVIDIA's first 2 petaFLOPS appliance with 16 NVIDIA V100 Tensor core GPUs, making it an excellent platform for tackling complex AI challenges. A security vulnerability exists in NVIDIA DGX-...

The vulnerability of the KVM virtualization subsystem in AMD Secure Encrypted Virtualization (SEV) in the virt/kvm/kvm_main.c kernel of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the KVM virtualization subsystem in AMD Secure Encrypted Virtualization SEV in the virt/kvm/kvmmain.c kernel of the Linux operating system is related to a breach of processor cache integrity. Exploiting this vulnerability could allow an attacker to trigger a service failure...

SUSE CVE-2013-0426

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.240 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vecto...

HP Support Assistant 安全漏洞

HP Support Assistant is a solution from Hewlett-Packard HP USA that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant, which stems from a potential security hole that could be exploited by an attacker to cause privilege escalation,...

Vulnerability of SNC_io parser <EW>: read_sedge(); seh->incident_sface(); component Nef_S2/SNC_io parser.h; library of computational geometry algorithms CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, located in the NefS2/SNCio parser.h file, and the associated CGAL computational geometry algorithm libraries, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker ...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the cross-platform software development framework Qt, related to resource management errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the cross-platform software development framework Qt is related to resource management errors. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created web page...

The vulnerability of the WSGI server for Python Waitress, related to HTTP request processing flaws, allows attackers to compromise data integrity.

The vulnerability of the WSGI server for Python Waitress is related to the improper handling of the recurring Content-Length header. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of the FreeRDP remote desktop protocol lies in the ability to write beyond the buffer boundaries, allowing attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the FreeRDP remote desktop protocol lies in the ability to write beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the virtio-fs hardware emulation driver in QEMU allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the QEMU virtual machine emulation software for hardware devices, specifically virtio-fs, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of embedded images of safety controller and microprogrammed logic controllers Honeywell Experion PKS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of embedded images of safety controller and microprogrammed logic controllers Honeywell Experion PKS is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Vulnerability of the MySQL Server component: The MySQL Server database management system’s DDL functions allow attackers to compromise the integrity of protected information or cause service failures.

Vulnerability of the MySQL Server component: The MySQL Server database management system has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities allows an attacker to compromise the integrity of protected information or cause service failures...

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s function decoding process allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MPEG-4 multimedia platform GPAC decoder’s decoding function is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Samples component of the Oracle WebLogic Server application server allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Samples component of the Oracle WebLogic Server application server exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...