17418 matches found
Improper Control of Generation of Code ('Code Injection')
An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import feature...
CVE-2023-47444
An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote code execution on the underlying server...
CVE-2023-46850
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer...
UBUNTU-CVE-2023-46850
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer...
The vulnerability of the utils-banner_message component in NagiosXI software, related to the lack of protective measures for the SQL query structure, allows attackers to execute arbitrary SQL queries.
The vulnerability of the utils-bannermessage component in NagiosXI is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
FreeBSD : openvpn -- 2.6.0...2.6.6 --fragment option division by zero crash, and TLS data leak (2fe004f5-83fd-11ee-9f5d-31909fb2f495)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2fe004f5-83fd-11ee-9f5d-31909fb2f495 advisory. - Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6...
The vulnerability of the monitoring software for PLK TELLUS and TELLUS Lite lies in the fact that operations are executed outside the buffer in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the monitoring software for TELLUS and TELLUS Lite systems lies in the fact that the execution of operations goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the Bulkmodifications component in NagiosXI software, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.
The vulnerability of the Bulkmodifications component in NagiosXI software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
Debian DSA-5555-1 : openvpn - security update
The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5555 advisory. Two vulnerabilities were discovered in openvpn, a virtual private network application which could result in memory disclosure or denial of service. The oldstable...
CVE-2023-36425 Windows Distributed File System (DFS) Remote Code Execution Vulnerability
...
webkitgtk: arbitrary javascript code execution
A vulnerability was found in WebKit. This flaw allows a remote attacker to cause arbitrary javascript code execution...
Microsoft Excel Remote Code Execution Vulnerability
...
VulnCheck KEV: CVE-2022-25369
Dynamicweb logic flaw remote code execution...
Microsoft Host Integration Server Security Vulnerability
Microsoft Host Integration Server is a gateway application from Microsoft USA that provides connectivity between Microsoft Windows networks and IBM mainframes and IBM i systems. Support is provided for SNA, 3270, 5250, CICS, APPC and other IBM protocols. A security vulnerability exists in Microso...
GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files...
Use-After-Free
openvpn is vulnerable to Use-After-Free. The vulnerability occurs when sending network buffers to a remote peer, resulting in memory leak buffers or a potential remote execution...
CVE-2023-46850
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer...
Design/Logic Flaw
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer...
CVE-2023-46850
CVE-2023-46850 concerns OpenVPN 2.6.0–2.6.6, where a use-after-free when sending network buffers to a remote peer can cause undefined behavior, memory leakage, or remote code execution. Multiple connected advisories confirm this issue and document downstream fixes across distros: Debian/DSA-5555-...
