CVE-2023-45284 Incorrect detection of reserved device names on Windows in path/filepath

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...

CVE-2023-45284 Incorrect detection of reserved device names on Windows in path/filepath

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...

CVE-2023-45284

CVE-2023-45284 concerns Windows path/filepath IsLocal misclassification of reserved device names. In affected builds, names like COM1 (with trailing space) or COM/LPT followed by superscript digits could be incorrectly treated as local, enabling local checks to pass when they should not. The fix ...

CVE-2023-45284 Incorrect detection of reserved device names on Windows in path/filepath

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...

Google Go Security Vulnerability

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google, Inc. A security vulnerability exists in Google Go that stems from the IsLocal function not properly detecting reserved device names...

GO-2023-2186 Incorrect detection of reserved device names on Windows in path/filepath

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...

Improper Check for Unusual or Exceptional Conditions

Overview std/path/filepath is a Go standard library package std/path/filepath Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions. Go Vulnerability Report:On Windows, The IsLocal function does not correctly detect reserved device names in some...

SUSE CVE-2023-45284

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports the...

PT-2023-7932

Name of the Vulnerable Software and Affected Versions Go versions 1.21.3 and earlier, 1.20.10 and earlier Description The issue is related to the IsLocal function not correctly detecting reserved device names in some cases on Windows. Specifically, reserved names followed by spaces, such as "COM1...

CVE-2023-5648

CVE-2023-5648: Several security-related HTTP headers were missing in Brocade ASCG prior to v3.0, which could facilitate attacks such as cross-site scripting, clickjacking, and information disclosure. The Brocade security advisories (BSNSA22715, and later BSNSA22786) show ASCG updates addressing t...

CVE-2023-32430

Apple iTunes for Windows prior to 12.12.9 is affected by multiple vulnerabilities including CVE-2023-32430 (WebKit dynamic library loading issue) that can lead to privilege escalation. The Apple advisory HT213763 and related Nessus/OpenVAS/KASPER reports confirm CVE-2023-32430 alongside CVE-2023-...

CVE-2023-46035

The CVE-2023-46035 issue affects the Ruby gem svg_optimizer (Fnando) v0.2.6, where an external XML entity (XXE) vulnerability is possible when optimizing untrusted SVG content due to default XXE handling in the code (svg_optimizer.rb). This can allow a remote attacker to escalate privileges by ex...

PT-2023-26054 · Undefined · Undefined

‼ CVE-2023-37637 ‼ REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-38817. Reason: This record is a reservation duplicate of CVE-2023-38817. Notes: All CVE users should reference CVE-2023-38817 instead of this record. All references and descriptions in this record have been removed to...

CVE-2023-35903

The IBM Security Verify Governance – Identity Manager (Virtual Appliance) is affected by CVE-2023-35903 due to improper file validation, enabling arbitrary file upload and related privilege escalation/sensitive information exposure. Affected systems are the Identity Manager virtual appliance comp...

CVE-2023-45291

reserved but not needed...

CVE-2023-5312

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-43226. Reason: This candidate is a reservation duplicate of CVE-2023-43226. Notes: All CVE users should reference CVE-2023-43226 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2023-5312

CVE-2023-5312 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-45023

The CVE-2023-45023 entry corresponds to a Broken Access Control in the TYPO3 extension femanager. Multiple connected sources (GHSA-93J4-V838-8767, OSV, Veracode, and FriendsOfPHP advisory) describe that femanager fails to check access permissions for the invitation component, allowing remote atta...

CVE-2023-21386

CVE-2023-21386 is listed in Android 14 security release notes under the System category with Type “ID” and Moderate severity. The provided connected documents confirm the CVE entry exists, but do not provide the root cause, affected components beyond that category, or remediation details. No expl...

CVE-2023-24287

CVE-2023-24287 is a published buffer overrun issue reported across Ubuntu and Debian trackers related to the Undead puzzle. A crafted save file can cause a buffer overrun; the connected documents describe Ubuntu/Debian entries but do not provide explicit patch versions or remediation steps. Explo...