3354 matches found
CVE-2023-36568
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability...
CVE-2023-36574
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36569
Microsoft Office Elevation of Privilege Vulnerability...
CVE-2023-36434
Windows IIS Server Elevation of Privilege Vulnerability...
CVE-2023-36561
Azure DevOps Server Elevation of Privilege Vulnerability...
CVE-2023-36438
Windows TCP/IP Information Disclosure Vulnerability...
CVE-2023-35349
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-5365
HP LIFE Android Mobile application is potentially vulnerable to escalation of privilege and/or information disclosure...
AZL-52845 CVE-2023-39323 affecting package golang for versions less than 1.20.10-1
Line directives "//line" can be used to bypass the restrictions on "//go:cgo" directives, allowing blocked linker and compiler flags to be passed during compilation. This can result in unexpected execution of arbitrary code when running "go build". The line directive requires the absolute path of...
libvpx: Heap buffer overflow in vp8 encoding in libvpx
A heap-based buffer overflow flaw was found in the way libvpx, a library used to process VP8 and VP9 video codecs data, processes certain specially formatted video data via a crafted HTML page. This flaw allows an attacker to crash or remotely execute arbitrary code in an application, such as a w...
The vulnerability of the libspf2 library used by the Exim mail server allows attackers to execute arbitrary code.
The vulnerability of the libspf2 library used by the Exim mail server is related to integer overflows caused by the use of SPF macros. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-4100
Allows an attacker to perform XSS attacks stored on certain resources. Exploiting this vulnerability can lead to a DoS condition, among other actions...
The vulnerability in the /sysmanage/updatelib.php script of the D-Link DAR-8000 and DAR-7000 routers allows a hacker to execute arbitrary commands.
The vulnerability in the /sysmanage/updatelib.php script of the D-Link DAR-8000 and DAR-7000 routers stems from the ability to download files of a malicious nature without limitation. Exploiting this vulnerability could allow an attacker to execute arbitrary commands remotely...
CVE-2023-44263
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Riyaz Social Metrics plugin = 2.2 versions...
CVE-2023-26148
All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n carriage return line feeds characters and inject additional headers in the request sent...
CVE-2023-26147
All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values. An attacker can add the \r\n carriage return line feeds characters to end the HTTP response headers and inject malicious content, like for example...
CVE-2023-41307
Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability...
CVE-2023-40450
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...