Fortinet FortiGate Access Control Error Vulnerability

Fortinet FortiGate is a suite of network security platforms from the American company Fiat Fortinet. The platform provides firewall, antivirus and intrusion prevention IPS, application control, anti-spam, wireless controller and WAN acceleration. Fortinet FortiGate suffers from an Access Control...

CLSA-2023-1681739907 nss: Fix of CVE-2023-0767

CVE-2023-0767: nss: improve handling of unknown PKCS12 safe bag types...

CVE-2023-28968

CVE-2023-28968 : An Improperly Controlled Sequential Memory Allocation in the JDPI-Decoder Application Signature (part of Junos OS AppID) can cause the JDPI-Decoder to stop identifying dynamic application traffic, allowing unauthenticated network-based traffic to pass through. Affected components...

CVE-2023-28982

CVE-2023-28982 affects Juniper Networks Junos OS and Junos OS Evolved. In a BGP rib sharding scenario, updating an active route’s attribute can cause a memory leak in the routing protocol daemon (rpd), leading to increased memory usage, a subsequent out-of-memory condition, and a DoS through rpd ...

Siemens Polarion XML External Entity Injection Vulnerability

Polarion ALM is an application lifecycle management solution that improves the software development process with a single unified solution for requirements, coding, testing and release. An XML external entity injection vulnerability exists in Siemens Polarion ALM, which arises from a networked...

CVE-2023-1617

CVE-2023-1617 concerns the B&R VC4 visualization (VNC-Server modules) where an unauthenticated network attacker can bypass authentication. Affected are B&R VC4 versions across multiple series: 3.* (to 3.96.7), 4.0* (to 4.06.7), 4.1* (to 4.16.3), 4.2* (to 4.26.8), 4.3* (to 4.34.6), 4.4* (to 4.45.1...

EulerOS 2.0 SP8 : mod_security (EulerOS-SA-2023-1601)

According to the versions of the modsecurity package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application...

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2023-1596)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header...

CLSA-2023-1681327540 nss: Fix of CVE-2023-0767

CVE-2023-0767: nss: improve handling of unknown PKCS12 safe bag types...

CVE-2023-28488

CVE-2023-28488 affects the gdhcp client in ConnMan (up to v1.41). A network-adjacent attacker crafting DHCP server traffic can trigger a stack-based buffer overflow, causing denial of service and connman termination. Public connected documents confirm affected products and fixes by distro: Debian...

PT-2023-9520 · Openlink +4 · Openlink Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.9 Description: The issue in the nss database lookup component of openlink virtuoso-opensource is related to the improper neutralization of special elements used in SQL commands, allowing attackers to...

CVE-2023-24544

Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a result, the product settings may be altered. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier,...

Siemens SCALANCE W1750D Improper Input Validation (CVE-2021-25143)

A remote denial of service dos vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.9 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that addre...

Siemens (CVE-2021-37716)

A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that addres...

Taiwanese PC Company MSI Falls Victim to Ransomware Attack

Taiwanese PC company MSI short for Micro-Star International officially confirmed it was the victim of a cyber attack on its systems. The company said it "promptly" initiated incident response and recovery measures after detecting "network anomalies." It also said it alerted law enforcement agenci...

Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server

CVE-2023-21837 POC,EXP, chatGPT for me code import so...

CVE-2023-0750

CVE-2023-0750 affects the Yellobrik PEC-1864 front-end authentication. The vulnerability stems from authentication checks implemented via JavaScript in the device’s frontend, which can be bypassed when the device is reachable over the network. Exploitation could allow an attacker to: change the p...

Western Digital confirms breach, affects My Cloud and SanDisk users

Western Digital, a big brand in digital storage, says it has suffered a "network security incident--potentially ransomware--which resulted in a breach and some system disruptions in its business operations. The company identified the incident on March 26 and said an unnamed third party unlawfully...

Design/Logic Flaw

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

CVE-2023-28841

CVE-2023-28841 describes a vulnerability in Moby/Docker Swarm encrypted overlay networks where, on affected platforms, encrypted overlay traffic can silently transmit unencrypted data due to how IPSec/VXLAN are enforced via iptables rules (using the xt_u32 module and VNI filtering). This can allo...