2057 matches found
PT-2023-30159
Name of the Vulnerable Software and Affected Versions Gallagher Diagnostics Service versions prior to 1.3.0 Description A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Diagnostics Service to use less secure...
CVE-2023-46686: Reliance on Untrusted Inputs in a Security Decision
A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Diagnostics Service to use less secure communication protocols. This issue affects: Gallagher Diagnostics Service prior to v1.3.0 distributed in 9.00.1507MR1...
GL.iNet Unauthenticated Remote Command Execution via the logread module.
A command injection vulnerability exists in multiple GL.iNet network products, allowing an attacker to inject and execute arbitrary shell commands via JSON parameters at the glsystemlog and glcrashlog interface in the logread module. This exploit requires post-authentication using the Admin-Token...
Group - Less critical - Access bypass - SA-CONTRIB-2023-054
The Group module has the ability to make content private to specific groups. When viewing a list of entities, e.g. nodes, a visitor should only see those entities that are either not attached to a group or that they have group access to. The module doesn't sufficiently enforce list access under t...
less-sa.com Improper Access Control vulnerability OBB-3803686
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-49093
HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution RCE via XSTL, when browsing the attacker’s webpage. This vulnerability has been patched in version 3.9.0...
CVE-2023-49093
HtmlUnit (Java GUI-less browser) is affected by CVE-2023-49093 where an RCE can be triggered via an XSLT processing flaw when loading attacker-controlled content. The issue stems from XSLT processing not enforcing secure processing, enabling remote code execution on a vulnerable system. A patch i...
AZL-33493 CVE-2023-42364 affecting package busybox for versions less than 1.35.0-11
A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function...
CVE-2023-39128 affecting package crash for versions less than 8.0.1-3
CVE-2023-39128 affecting package crash for versions less than 8.0.1-3. A patched version of the package is available...
CVE-2023-39130 affecting package crash for versions less than 8.0.1-3
CVE-2023-39130 affecting package crash for versions less than 8.0.1-3. A patched version of the package is available...
CVE-2023-5211 Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
The Fattura24 WordPress plugin before 6.2.8 does not sanitize or escape the 'id' parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting vulnerability...
CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10
CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...
Embracing Minimalism: The “Less is More” Approach in UI/UX Design
By Owais Sultan In user interface UI and user experience UX design, the principle of "less is more" has emerged as… This is a post from HackRead.com Read the original post: Embracing Minimalism: The "Less is More" Approach in UI/UX Design...
CVE-2023-5535 affecting package vim for versions less than 9.0.2010-1
CVE-2023-5535 affecting package vim for versions less than 9.0.2010-1. A patched version of the package is available...
CVE-2023-25674 affecting package tensorflow for versions less than 2.11.1-1
CVE-2023-25674 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is available...
CVE-2023-38545 affecting package curl for versions less than 8.3.0-2
CVE-2023-38545 affecting package curl for versions less than 8.3.0-2. A patched version of the package is available...
CVE-2023-44487 affecting package jx for versions less than 3.2.236-13
CVE-2023-44487 affecting package jx for versions less than 3.2.236-13. A patched version of the package is available...
CVE-2023-44487 affecting package packer for versions less than 1.8.1-14
CVE-2023-44487 affecting package packer for versions less than 1.8.1-14. A patched version of the package is available...
CVE-2022-41861 affecting package freeradius for versions less than 3.2.3-1
CVE-2022-41861 affecting package freeradius for versions less than 3.2.3-1. An upgraded version of the package is available that resolves this issue...