CVE-2023-22005

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2023-22016

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.46 and Prior to 7.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

libostree 安全漏洞

libostree is an operating system and container binary deployment and upgrade tool open-sourced by the OSTree Project. A security vulnerability exists in versions of libostree prior to 2022.7 that originated from allowing an attacker to cause a denial of service via the printpanic function in...

PT-2024-7943

Name of the Vulnerable Software and Affected Versions tvOS versions prior to 17.5 iOS versions prior to 16.7.8 and prior to 17.5 iPadOS versions prior to 16.7.8 and prior to 17.5 visionOS version prior to 1.2 Safari version prior to 17.5 Description An integer overflow was addressed with improved...

PT-2023-3572 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.98 Description: The issue is related to the implementation of WebRTC technology in Google Chrome, specifically a use after free error. This could allow a remote attacker to potentially exploit heap...

CVE-2023-3700 Authorization Bypass Through User-Controlled Key in alextselegidis/easyappointments

Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

Mattermost 授权问题漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from the fact that all previous tokens are not invalidated when a new reset token is created...

PT-2023-24477

Name of the Vulnerable Software and Affected Versions Zekiweb versions prior to 2 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations For versions prior...

PT-2023-25986

Name of the Vulnerable Software and Affected Versions github.com/hamba/avro versions prior to 2.13.0 Description A well-crafted string passed to avro's github.com/hamba/avro/v2.Unmarshal can throw a fatal error: runtime: out of memory which is unrecoverable and can cause denial of service of the...

PT-2023-5893 · Unknown +2 · Openrefine +2

Name of the Vulnerable Software and Affected Versions: OpenRefine versions prior to 3.7.4 Description: The issue is related to a Zip Slip vulnerability in OpenRefine, which can be exploited by a specially crafted malicious OpenRefine project tar file. This can lead to arbitrary code execution in...

PT-2023-26409 · Crestron · Crestron 3-Series Control Systems

Name of the Vulnerable Software and Affected Versions: Crestron 3-Series Control Systems versions prior to 1.8001.0187 Description: The issue allows an attacker to cause a crash by crafting and sending a specific BACnet packet. Recommendations: For Crestron 3-Series Control Systems versions prior...

CVE-2023-3668 Improper Encoding or Escaping of Output in froxlor/froxlor

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

PT-2023-25690 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.24 Description: The issue is related to SQL Injection in the GitHub repository pimcore/pimcore. Recommendations: For versions prior to 10.5.24, update to version 10.5.24 or later to resolve the issue...

PT-2023-26371 · Rswag · Rswag

Name of the Vulnerable Software and Affected Versions: rswag versions prior to 2.10.1 Description: The issue allows remote attackers to read arbitrary JSON and YAML files via directory traversal. This occurs because rswag-api can expose a file that is not the OpenAPI or Swagger specification file...

Elra Parkmatik SQL注入漏洞

Elra Parkmatik is an application from Elra Parkmatik, Inc. A SQL injection vulnerability exists in versions prior to Elra Parkmatik 02.01-a51, which stems from SQL injection possible via SOAP parameter tampering...

Panda Security VPN 代码问题漏洞

Panda Security VPN is a VPN software from Panda Security. A security vulnerability exists in versions prior to Panda Security VPN v15.14.8 that stems from the presence of a DLL hijacking vulnerability that allows attackers to execute arbitrary code by placing a crafted DLL file in the same...

CVE-2023-37954

A cross-site request forgery CSRF vulnerability in Jenkins Rebuilder Plugin 320.v5a0933ae7d61 and earlier allows attackers to rebuild a previous build...

CVE-2023-30226

An issue was discovered in function getgnuverneed in rizinorg Rizin prior to 0.5.0 verneedentry allows attackers to cause a denial of service via crafted elf file...

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A cross-site scripting vulnerability exists in...

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A cross-site scripting vulnerability exists in...