CVE-2023-40955

A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management aka pdm v.14.0, v.15.0 and v.16.0 fixed in pdm-14.0.1.0.0, pdm-15.0.1.0.0, and pdm-16.0.1.0.0 allows a remote authenticated attacker to execute arbitrary code via the select parameter in models/baseclient.py componen...

The vulnerability of the Metabase data visualization and reporting software, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the Metabase data visualization and reporting software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-40869

Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions...

CVE-2023-41011

Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcuttelnet.cg component...

CVE-2023-40397

A vulnerability was found in WebKit. This flaw allows a remote attacker to cause arbitrary javascript code execution. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and...

[SECURITY] Fedora 37 Update: salt-3005.2-1.fc37

Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...

The vulnerability of the set_qos function in the Milesight UR32L router software allows a hacker to execute arbitrary code.

The vulnerability of the setqos function in the Milesight UR32L router microprogramming system arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Fedora: Security Advisory for salt (FEDORA-2023-ac1aa963e4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of TP-Link Archer C20, Archer C55, and Archer C50 router microprogramming software lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of TP-Link Archer C20, Archer C55, and Archer C50 router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the set_l2tp function in the microprogramming software for the Milesight UR32L router allows a hacker to execute arbitrary code.

The vulnerability of the setl2tp function in the microprogramming software for the Milesight UR32L router is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

FreeBSD : vscode -- VS Code Remote Code Execution Vulnerability (4bc66a81-89d2-4696-a04b-defd2eb77783)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4bc66a81-89d2-4696-a04b-defd2eb77783 advisory. - Visual Studio Code Remote Code Execution Vulnerability CVE-2023-36742 Note that Nessus has not tested...

The vulnerability of ASUS RT-AX55 router’s microprogramming software lies in insufficient checking of arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of ASUS RT-AX55 router’s microprogramming software is related to insufficient testing of the arguments passed in the command. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Pixel & tonic Craft CMS Code Injection Vulnerability

Pixel & tonic Craft CMS is a content management system CMS from the US-based Pixel & tonic, Inc. A code injection vulnerability exists in Pixel & tonic Craft CMS versions prior to 4.4.15, which stems from the presence of a remote code execution vulnerability...

Microsoft 3D Builder 安全漏洞

Microsoft 3D Builder is a tool for creating models and 3D printing from Microsoft. A remote code execution vulnerability exists in Microsoft 3D Builder, which can be exploited by an attacker to execute arbitrary code on a system...

CVE-2023-42471

The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. It contains a manifest entry that exports the wave.ai.browser.ui.splash.SplashScreen activity. This activity uses a WebView component to display web conte...

Design/Logic Flaw

The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. It contains a manifest entry that exports the wave.ai.browser.ui.splash.SplashScreen activity. This activity uses a WebView component to display web conte...

Apache Superset Code Execution Vulnerability

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. A code execution vulnerability exists in Apache Superset version 2.1.0 and earlier, which can be exploited by an attacker to remotely execute code on a Web backend...

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

The vulnerability of the library for accessing and creating SQLite JDBC files is related to improper code generation. This allows an attacker to execute arbitrary code.

The vulnerability of the library for accessing and creating SQLite JDBC files is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...