CVE-2023-50918

app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...

CVE-2022-44543

The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups if there is a usergroup field on the registration form. This occurs because the usergroup.inList protection mechanism is mishandled...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. The security vulnerability in the MediaTek chips stems from an error mishandling issue in the 5G Modem module, which could lead to a system crash...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. The security vulnerability in the MediaTek chips stems from an error mishandling issue in the 5G Modem module, which could lead to a system crash...

PT-2023-29127 · Unknown · Bamboo Columns

Name of the Vulnerable Software and Affected Versions: Bamboo Columns versions through 1.6.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious script...

GHSA-2GHM-R75J-PJX2 Cross-site Scripting in DOMSanitizer

DOMSanitizer aka dom-sanitizer before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions...

Cross-site Scripting in DOMSanitizer

DOMSanitizer aka dom-sanitizer before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions...

CVE-2023-49146

DOMSanitizer aka dom-sanitizer before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions...

CVE-2023-49146

DOMSanitizer aka dom-sanitizer before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions...

CVE-2023-49146

DOMSanitizer aka dom-sanitizer before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions...

CVE-2023-48657

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters...

Design/Logic Flaw

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters...

CVE-2023-48656

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses...

PT-2023-30878

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.176 Description An issue was discovered in the app/Model/AppModel.php file, where it mishandles filters. Recommendations For versions prior to 2.4.176, update to version 2.4.176 or later to resolve the issue...

CVE-2023-48656

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses...

Huawei EulerOS: Security Advisory for amanda (EulerOS-SA-2023-3112)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rocky Linux 8 : perl (RLSA-2021:1678)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1678 advisory. - Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...

Denial Of Service (DoS)

github.com/quic-go/quic-go is vulnerable to Denial Of Service DoS. The vulnerability is a result of the mishandling of ACK frames that are serialized after CRYPTO frames in connection.go during the node handshake process. This flaw allows a malicious remote node to trigger a null pointer...

SUSE CVE-2015-0283

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service infinite loop and CPU consumption via a request for a 1 group with a large number of members or 2 user that belongs to a large number o...

RHEL 8 : thunderbird (RHSA-2023:6196)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6196 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.4.1. Security Fixes: Mozilla:...