3365 matches found
CVE-2023-28262
Visual Studio Elevation of Privilege Vulnerability...
CVE-2023-28237
Windows Kernel Remote Code Execution Vulnerability...
CVE-2023-28244
Windows Kerberos Elevation of Privilege Vulnerability...
CVE-2023-28231
DHCP Server Service Remote Code Execution Vulnerability...
CVE-2023-28216
Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...
CVE-2023-28217
Windows Network Address Translation NAT Denial of Service Vulnerability...
CVE-2023-24931
Windows Secure Channel Denial of Service Vulnerability...
CVE-2023-24914
Win32k Elevation of Privilege Vulnerability...
CVE-2023-21729
Remote Procedure Call Runtime Information Disclosure Vulnerability...
CVE-2023-27759
An issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to executea arbitrary commands via the WindowsCodescs.dll file...
AZL-25846 CVE-2023-27535 affecting package curl for versions less than 8.0.1-1
An authentication bypass vulnerability exists in libcurl 8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain...
CVE-2022-28688
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 04201.2111.1802.0000. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
Null pointer dereference
A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploi...
Information Disclosure
sudo is vulnerable to Information Disclosure. The vulnerability exists due to the library does not properly escape the control characters in sudoreplay output of log messages, which allows an attacker to gain sensitive information...
USN-5806-3 ruby2.7 vulnerability
USN-5806-1 fixed vulnerabilities in Ruby. This update fixes the problem for Ubuntu 20.04 LTS. Original advisory details: Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications which generate HTTP responses using cgi gem. An attacker could possibly use th...
MP4v2 安全漏洞
MP4v2 is a library for creating, modifying, and reading MP4 files by enzo1982 individual developers. A security vulnerability exists in MP4v2 version 2.1.2, which stems from a security issue in the function DumpTrack in the file mp4trackdump.cpp, resulting in a denial of service...
CVE-2023-27040
Simple Image Gallery v1.0 was discovered to contain a remote code execution RCE vulnerability via the username parameter...
AZL-25664 CVE-2023-28155 affecting package reaper for versions less than 3.1.1-5
The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect HTTP to HTTPS, or HTTPS to HTTP. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...