PT-2023-14385 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks...

Roundcube -- XSS vulnerability in SVG

The Roundcube project reports: cross-site scripting XSS vulnerability in handling of SVG in HTML messages...

CVE-2023-42792

creationtimestamp| type| source ---|---|--- 2023-10-14 14:29:49+00:00| seen| https://t.me/cibsecurity/72282 2024-01-14 09:36:43+00:00| seen| https://t.me/ctinow/167980...

Oracle Linux 9 : bind (ELSA-2023-5689)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5689 advisory. 32:9.16.23-11.2 - stack exhaustion in control channel code may lead to DoS CVE-2023-3341 Tenable has extracted the preceding description block directly from the...

Microsoft Skype for Business Remote Code Execution Vulnerability (CNVD-2023-92200)

Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. A remote code execution vulnerability exists in Microsoft Skype fo...

Microsoft Skype for Business Remote Code Execution Vulnerability

Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. A remote code execution vulnerability exists in Microsoft Skype fo...

The vulnerability of the gettext() function in the distributed version control system Git for Windows allows a hacker to insert any messages they want.

The vulnerability of the gettext function in the distributed version control system Git for Windows is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious individual to deploy arbitrary messages...

Design/Logic Flaw

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. PTX3000, PTX5000, QFX10000, PTX1000, PTX10002, and PTX10004, PTX10008 and PTX10016 wit...

CVE-2023-42782

A insufficient verification of data authenticity vulnerability CWE-345 in FortiAnalyzer version 7.4.0 and below 7.2.3 allows a remote unauthenticated attacker to send messages to the syslog server of FortiAnalyzer via the knoweldge of an authorized device serial number...

libqb: Buffer overflow in log_blackbox.c

logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered...

CVE-2023-5499

Information exposure vulnerability in Shenzhen Reachfar v28, the exploitation of which could allow a remote attacker to retrieve all the week's logs stored in the 'log2' directory. An attacker could retrieve sensitive information such as remembered wifi networks, sent messages, SOS device locatio...

Fortinet FortiAnalyzer 数据伪造问题漏洞

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...

PT-2023-8953 · Mediawiki +2 · Mediawiki +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.12 MediaWiki versions 1.36.x through 1.39.x before 1.39.5 MediaWiki versions 1.40.x before 1.40.1 Description: The issue is related to cross-site scripting XSS in the youhavenewmessagesmanyusers and...

The vulnerability of the Messages component in operating systems iPadOS and iOS allows a hacker to send a text message from an additional eSIM card.

The vulnerability of the Messages component in iPadOS and iOS operating systems is related to state management errors. Exploiting this vulnerability allows a malicious actor to send text messages from an additional eSIM card remotely...

The vulnerability of the communication protocol implementation for microprogrammed ER2000 routers allows a hacker to execute arbitrary code.

The vulnerability of the communication protocol implementation for microprogrammed router software ER2000 is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code by inserting arguments int...

Cross-site Scripting (XSS)

Overview org.webjars:jquery-validation is a Client-side form validation made easy Affected versions of this package are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via...

Cross-site Scripting (XSS)

Overview org.webjars.npm:jquery-validation is a Client-side form validation made easy Affected versions of this package are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via...

Cross-site Scripting (XSS)

Overview org.webjars.bowergithub.jquery-validation:jquery-validation is a Client-side form validation made easy Affected versions of this package are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will...

Cross-site Scripting (XSS)

Overview org.webjars.bower:jquery-validation is a Client-side form validation made easy Affected versions of this package are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via...

Cross-site Scripting (XSS)

Overview jquery-validation is a Client-side form validation made easy Affected versions of this package are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages ...