2265 matches found
CVE-2023-3286
CVE-2023-3286 affects Easy!Appointments prior to version 1.5.0. The vulnerability is described as a BOLA issue on POST /secretaries that allows a low-privileged user to create another low-privileged secretary account, enabling unauthorized data manipulation. The connected sources consistently fra...
CVE-2023-3285
CVE-2023-3285 refers to an Insecure Authorization (BOLA) in the EasyAppointments web app. The vulnerability resides in the POST /appointments endpoint, where a low-privileged user can create an appointment for any user (including administrators), leading to unauthorized data manipulation. Technic...
CVE-2023-50805
CVE-2023-50805 affects Samsung Mobile Processor, Wearable Processor, and Modems across Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/1330/9110/W920/W930, and Exynos Modem 5123/5300. The vulnerability is an out-of-bounds write in the heap encountered in 2G (no authentication required). Mul...
CVE-2023-50806
CVE-2023-50806 affects Samsung Mobile Processor, Wearable Processor, and Modems (Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/1330/9110/W920/W930, Exynos Modem 5123, 5300). Description: an out-of-bounds heap-buffer access in the SIM Proactive Command. Impact and likelihood: CVSSv3.1 base...
CVE-2024-28882
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session...
CVE-2024-28882
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session...
CVE-2024-28882
OpenVPN versions 2.6.0 through 2.6.10 are vulnerable to a flaw where the server role accepts multiple exit notifications from authenticated clients. This allows a client to extend the validity of a closing session , effectively keeping the session alive even when the server is instructed to disco...
CVE-2024-3651
A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...
CVE-2024-3651
CVE-2024-3651 affects the kjd/idna Python package (python-idna) and specifically the idna.encode() path in version 3.6. The issue arises when processing crafted input strings, causing quadratic growth in CPU load and resulting in a denial of service. Connected sources (Astra Linux, CIRCL, CBLMari...
CVE-2023-52340
The CVE concerns the Linux kernel IPv6 implementation (net/ipv6/route.c) where a max_size threshold can be exhausted, enabling a denial-of-service condition (network is unreachable) when IPv6 packets loop via a raw socket. Affected: Linux kernel versions prior to 6.3. Impact is denial of service ...
CVE-2024-29510
Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device...
CVE-2024-33869
An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur via a crafted PostScript document because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command output filename...
CVE-2024-33871
An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp and oprp devices can have an arbitrary name for a...
CVE-2024-33870
An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal via a crafted PostScript document to arbitrary files if the current directory is in the permitted paths. For example, there can be a transformation of ../../foo to ./../../foo and this will grant access if ./ i...
CVE-2024-33869
Artifex Ghostscript versions prior to 10.03.1 are vulnerable to path traversal and command execution due to improper input validation and path reduction in the base/gpmisc.c file. An attacker can exploit this by providing a crafted PostScript document to bypass restrictions on the use of %pipe%, ...
CVE-2024-33871
An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp and oprp devices can have an arbitrary name for a...
CVE-2024-33870
Artifex Ghostscript versions prior to 10.03.1 are vulnerable to a path traversal vulnerability. An attacker can use a crafted PostScript document to access arbitrary files if the current directory is included in the permitted paths; for instance, a transformation of ../../foo to ./../../foo may g...
CVE-2024-29510
Artifex Ghostscript versions prior to 10.03.1 are vulnerable to a critical format string injection flaw involving the uniprint device. Specifically, the upYMoveCommand and upWriteComponentCommands device parameters are improperly used as format strings for the gs_snprintf() function within the up...