USN-6176-1 pypdf2 vulnerability

It was discovered that PyPDF2 incorrectly handled certain PDF files. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to consume system resources, resulting in a denial of service...

CVE-2023-21122

In various functions of various files, there is a possible way to bypass the DISALLOWDEBUGGINGFEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-32030

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2023-32018

Windows Hello Remote Code Execution Vulnerability...

CVE-2023-32009

Windows Collaborative Translation Framework Elevation of Privilege Vulnerability...

CVE-2023-29359

GDI Elevation of Privilege Vulnerability...

CVE-2023-29360

Microsoft Streaming Service Elevation of Privilege Vulnerability...

CVE-2023-29346

NTFS Elevation of Privilege Vulnerability...

CVE-2023-3047

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMT Lockcell allows SQL Injection.This issue affects Lockcell: before 15...

UBUNTU-CVE-2023-33128

.NET and Visual Studio Remote Code Execution Vulnerability...

UBUNTU-CVE-2023-32032

.NET and Visual Studio Elevation of Privilege Vulnerability...

UBUNTU-CVE-2023-29331

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...

Cross-Site Scripting (XSS)

com.liferay:com.liferay.dynamic.data.mapping.form.web is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end, allowing a remote authenticated attacker to inject and execute malicious JavaScript on victim's...

CVE-2022-35748

HTTP.sys Denial of Service Vulnerability...

The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary code.

The vulnerability of the NPM packet manager’s vm2 library is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

keep-module-latest 命令注入漏洞

keep-module-latest is a library. A security vulnerability exists in keep-module-latest that stems from a lack of input cleanup or other checks, leaving it vulnerable to command injection attacks...

MP4v2 资源管理错误漏洞

MP4v2 is a library for creating, modifying, and reading MP4 files by enzo1982 Personal Developer. A security vulnerability exists in MP4v2 version v2.1.2, which originates from a memory leak that can be caused via class MP4BytesProperty...

Code injection

c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...

c-ares 安全特征问题漏洞

c-ares is a C library for asynchronous DNS requests from the individual developers of c-ares. A security vulnerability exists in c-ares versions prior to 1.19.1, which stems from generating predictable output...

CVE-2023-23301

The news MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that string resources are not extending past the end of the expected sections. A malicious CIQ application could craft a string that starts near the end of a section, and whose length extends past its end. Upon...