CVE-2023-3100

A vulnerability, which was classified as critical, has been found in IBOS 4.5.5. Affected by this issue is the function actionDel of the file ?r=dashboard/approval/del. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-0041

IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration. IBM X-Force ID: 243657...

Glyph & Cog XpdfReader 数字错误漏洞

Glyph & Cog XpdfReader is a free PDF viewer and toolkit from Glyph & Cog. Includes text extractor, image converter, HTML converter and more. A security vulnerability exists in Glyph & Cog XpdfReader versions prior to 4.05, which stems from a PDF page that is too large and causes Xpdf's text...

CVE-2023-28399

Incorrect permission assignment for critical resource exists in CONPROSYS HMI System CHS versions prior to 3.5.3. ACL Access Control List is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privileges is permitted to a user of the PC whe...

Vulnerabilities fixed in IBM QRadar Wincollect Agent

IBM has fixed vulnerabilities in the Wincollect Agent of QRadar. A local malicious person could exploit the vulnerabilities to grant themselves elevated privileges and execute arbitrary code execute code with permissions from the underlying system. IBM has released updates to fix the...

Pimcore 安全漏洞

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce frameworks and product information management applications. A security vulnerability exists in Pimcore...

CVE-2023-33791

A stored cross-site scripting XSS vulnerability in the Create Provider Accounts /circuits/provider-accounts/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

PT-2023-23767 · Apple · Macos Ventura +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.5 iPadOS versions prior to 16.5 watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 Description: The issue allows an app to potentially disclose kernel memory due to inadequa...

PT-2023-3646 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 iOS versions prior to 16.5 iPadOS versions prior to 16.5 Description: The issue is related to an out-of-bounds read in the kernel memory, which can be exploited by an app to disclose...

PT-2023-23779 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: Apple macOS versions prior to 13.4 Apple macOS versions prior to 11.7.7 Apple macOS versions prior to 12.6.6 Apple iOS versions prior to 16.5 Apple iPadOS versions prior to 16.5 Apple tvOS versions prior to 16.5 Description: The issue allows ...

PT-2023-23756 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 16.5 Apple iPadOS versions prior to 16.5 Apple watchOS versions prior to 9.5 Apple tvOS versions prior to 16.5 Apple macOS Ventura versions prior to 13.4 Description: An out-of-bounds read issue was addressed with...

Apple watchOS 安全漏洞

Apple watchOS is a smartwatch operating system from Apple. A security vulnerability exists in Apple watchOS version 9.5, which stems from the fact that an attacker with physical access to a locked Apple Watch may be able to view a user's photos or contacts via assistive features...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS before 16.5 and iPadOS before 16.5, which stems from an application firewall...

Weaver E-Office 安全漏洞

Weaver E-Office is a collaborative office system from China's Panavision Technologies Weaver. A security vulnerability exists in Weaver E-Office version 9.5. An attacker can exploit the vulnerability to access files or directories...

Weaver E-Office 安全漏洞

Weaver E-Office is a collaborative office system from China's PanWei Technologies Weaver. A security vulnerability exists in Weaver E-Office version 9.5 and earlier versions, which is caused by an incorrect operation of the parameter url that results in absolute path traversal...

CVE-2023-25309

Cross Site Scripting XSS Vulnerability in Fetlife rollout-ui version 0.5, allows attackers to execute arbitrary code via a crafted url to the delete a feature functionality...

IBM Spectrum Virtualize 信息泄露漏洞

IBM Spectrum Virtualize is a block storage virtualization system from International Business Machines IBM, Inc. that increases the data value, security and simplicity of new and existing storage infrastructures. An information disclosure vulnerability exists in IBM Spectrum Virtualize version 8.5...

Weaver E-Office 命令注入漏洞

Weaver E-Office is a collaborative office system from China's Panavision Technologies Weaver. A command injection vulnerability exists in Weaver E-Office version 9.5, which stems from a problem in the file /webroot/inc/utilityall.php that can lead to command injection...

CVE-2022-47423

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ulf Benjaminsson WP-dTree plugin = 4.4.5 versions...

PT-2023-8732 · Sap · Sap Netweaver As Java

Name of the Vulnerable Software and Affected Versions: SAP AS NetWeaver JAVA versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50 Description: The issue is related to the lack of authentication for a critical function in SAP AS NetWeaver JAVA, allowing an unauthenticated attacker to attach t...