Aruba Networks Airwave Operating System Command Injection Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 7.7.14.2, 8.x through 8.0.7. An attacker could exploit the vulnerability to remotely execute operating...

PT-2023-22909 · Unknown · Dual Messenger

Name of the Vulnerable Software and Affected Versions: Dual Messenger versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper access control in Dual Messenger, allowing local attackers to launch activities with system privilege. Recommendations: For versions prior t...

PT-2023-27501 · Unknown · Vi Web Client

Name of the Vulnerable Software and Affected Versions: VI Web Client versions prior to 7.9.6 Description: A stored cross-site scripting issue in the View setting page of VI Web Client allows a remote authenticated attacker to inject an arbitrary script. Recommendations: For versions prior to 7.9....

PT-2023-6524 · Apache +3 · Apache Axis +3

Name of the Vulnerable Software and Affected Versions: Apache Axis versions prior to 1.4 Description: The issue arises from insufficient input validation in the implementation of the Apache Axis web service platform, allowing potentially dangerous lookup mechanisms such as LDAP when looking up a...

AZL-28658 CVE-2023-4750 affecting package vim for versions less than 9.0.1897-1

Use After Free in GitHub repository vim/vim prior to 9.0.1857...

CVE-2023-4752

Use After Free in GitHub repository vim/vim prior to 9.0.1858...

CVE-2023-4750

Use After Free in GitHub repository vim/vim prior to 9.0.1857...

CVE-2023-4752

Use After Free in GitHub repository vim/vim prior to 9.0.1858...

CVE-2023-4755

CVE-2023-4755 is a Use After Free vulnerability in gpac/gpac prior to 2.3-DEV. Affected component is the gpac/gpac codebase; root cause described as a Use After Free. Impact per sources includes availability disruption, with CVSS notes indicating a HIGH impact on availability. remediation availab...

GPAC Buffer Error Vulnerability

GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.3-DEV, which stems from an over-reading of a buffer...

SHIRASAGI Path Traversal Vulnerability

SHIRASAGI is a content management system CMS for the Japanese Shirasagi project. A security vulnerability exists in SHIRASAGI versions prior to v1.18.0. An attacker could exploit this vulnerability to execute arbitrary code by changing or creating arbitrary files on the server...

Design/Logic Flaw

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

ALPINE-CVE-2023-4735

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847...

CVE-2023-4735

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847...

CVE-2023-4734

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846...

CVE-2023-4735 Out-of-bounds Write in vim/vim

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847...

CVE-2023-4722 Integer Overflow or Wraparound in gpac/gpac

Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV...

CVE-2023-4720 Floating Point Comparison with Incorrect Operator in gpac/gpac

Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV...

CVE-2023-4698

Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2...

hjson-java Code Injection Vulnerability

hjson-java is Hjson open source a json, java conversion library . A security vulnerability exists in versions prior to hjson-java v3.0.0 that stems from allowing an attacker to cause a denial of service DoS by supplying a crafted JSON string...