CVE-2022-28688

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 04201.2111.1802.0000. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Null pointer dereference

A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploi...

Information Disclosure

sudo is vulnerable to Information Disclosure. The vulnerability exists due to the library does not properly escape the control characters in sudoreplay output of log messages, which allows an attacker to gain sensitive information...

USN-5806-3 ruby2.7 vulnerability

USN-5806-1 fixed vulnerabilities in Ruby. This update fixes the problem for Ubuntu 20.04 LTS. Original advisory details: Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications which generate HTTP responses using cgi gem. An attacker could possibly use th...

MP4v2 安全漏洞

MP4v2 is a library for creating, modifying, and reading MP4 files by enzo1982 individual developers. A security vulnerability exists in MP4v2 version 2.1.2, which stems from a security issue in the function DumpTrack in the file mp4trackdump.cpp, resulting in a denial of service...

CVE-2023-27040

Simple Image Gallery v1.0 was discovered to contain a remote code execution RCE vulnerability via the username parameter...

AZL-25664 CVE-2023-28155 affecting package reaper for versions less than 3.1.1-5

The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect HTTP to HTTPS, or HTTPS to HTTP. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

PYSEC-2023-2

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2...

CVE-2023-24908

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2023-24910

Windows Graphics Component Elevation of Privilege Vulnerability...

CVE-2023-23420

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-23397

Microsoft Outlook Elevation of Privilege Vulnerability...

CVE-2023-23399

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2023-23395

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2023-23405

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2023-23392

HTTP Protocol Stack Remote Code Execution Vulnerability...

CVE-2023-23389

Microsoft Defender Elevation of Privilege Vulnerability...

CVE-2023-20640

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629573; Issue ID: ALPS07629573...

USN-5901-1 gnutls28 vulnerability

Hubert Kario discovered that GnuTLS had a timing side-channel when handling certain RSA messages. A remote attacker could possibly use this issue to recover sensitive information...

CVE-2023-0754

The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code...