NetApp SnapGathers Security Breach

NetApp SnapGathers is a unified, scalable data protection platform from Network Appliance NetApp. A security vulnerability exists in NetApp SnapGathers versions prior to 4.9, which stems from a vulnerability that allows a locally authenticated attacker to discover plaintext domain user credential...

PT-2023-21063 · Unknown · Snapgathers

Name of the Vulnerable Software and Affected Versions: SnapGathers versions prior to 4.9 Description: The issue allows a local authenticated attacker to discover plaintext domain user credentials. Recommendations: For versions prior to 4.9, update to version 4.9 or later to resolve the issue...

CVE-2023-44082

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. Thi...

libvpx: crash related to VP9 encoding in libvpx

A heap-based buffer overflow flaw was found in libvpx, a library used to process VP9 video codecs data. This issue occurs when processing certain specially formatted video data via a crafted HTML page, allowing an attacker to crash or remotely execute arbitrary code in an application, such as a w...

libvpx: crash related to VP9 encoding in libvpx

A heap-based buffer overflow flaw was found in libvpx, a library used to process VP9 video codecs data. This issue occurs when processing certain specially formatted video data via a crafted HTML page, allowing an attacker to crash or remotely execute arbitrary code in an application, such as a w...

PT-2023-29289 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions 8.5.12 and below Concrete CMS versions 9.0 through 9.2.1 Description: A Cross Site Scripting XSS vulnerability allows an attacker to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from...

PT-2023-29286 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions 9.2.0 through 9.2.2 Description: A Cross Site Scripting XSS vulnerability in Concrete CMS allows an attacker to execute arbitrary code via a crafted script to the Tags from Settings - Tags. Recommendations: For versions...

VP9 in libvpx before 1.13.1 mishandles widths leading to a crash related to encoding.

...

AZL-31041 CVE-2023-5344 affecting package vim for versions less than 9.0.2010-1

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

Improper restriction of XML external entity references (XXE) in FD Application

Overview FD Application provided by Ministry of Health, Labour and Welfare improperly restricts XML external entity references XXE CWE-611. Toyama Taku and Sakaki Ryutaro of NEC Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Ear...

SLims Code Issue Vulnerability

Slims9 Bulian is a free and open source software from the Indonesian Slims community. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A code issue vulnerability exists in SLims version 9.6.0, which stems from a...

CVE-2023-43044

IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 266893...

CVE-2023-38873

The commit 3730880 April 2023 and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking. Clickjacking, also known as a "UI redress attack", is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were...

WebCatalog Security Vulnerabilities

WebCatalog is a desktop application from WebCatalog, Inc. that improves workflow and increases productivity. A security vulnerability exists in WebCatalog versions prior to 49.0 that stems from not validating whether a URL is used for an http or https resource...

IBM License Metric Tool Path Traversal Vulnerability

The IBM License Metric Tool is a set of free tools from International Business Machines IBM that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU license requirements. A path traversal vulnerability exists in IBM License Metric...

CVE-2023-4523

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm...

CVE-2023-44172

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminweixin.php...

SeaCMS Security Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version V12.9, which originates from an arbitrary file write vulnerability in adminsmtp.php...

SeaCMS Security Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version V12.9, which originates from an arbitrary file write vulnerability in adminip.php...

Shihonkanri Plus Path Traversal Vulnerability

Ekakin Shihonkanri Plus GOOUT is a CGI Public Gateway Interface from Ekakin Japan. A path traversal vulnerability exists in Shihonkanri Plus Ver9.0.3 and earlier versions that could allow a local attacker to execute arbitrary code by allowing a legitimate user to import a specially crafted produc...