8963 matches found
Oracle Linux 9 : nodejs:18 (ELSA-2023-2654)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2654 advisory. - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807 - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920 nodejs-nodemon...
K000134602: Node.js vulnerabilities CVE-2023-23918 and CVE-2023-23920
Security Advisory Description CVE-2023-23918 A privilege escalation vulnerability exists in Node.js 19.6.1, 18.14.1, 16.19.1 and 14.21.3 that made it possible to bypass the experimental Permissions https: //nodejs. org/api/permissions.html feature in Node.js and access non authorized modules by...
SUSE CVE-2023-2454
schemaelement defeats protective searchpath changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code...
AlmaLinux 9 : nodejs:18 (ALSA-2023:2654)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2654 advisory. glob-parent: Regular Expression Denial of Service CVE-2021-35065 c-ares: buffer overflow in configsortlist due to missing string length check CVE-2022-490...
CVE-2023-31197
Uncontrolled search path in the IntelR Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-31197
Uncontrolled search path in the IntelR Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-31197
Uncontrolled search path in the IntelR Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-31197
The CVE-2023-31197 issue is an Uncontrolled search path vulnerability in Intel\u00ae Trace Analyzer and Collector prior to version 2020 update 3 that could allow an authenticated local user to escalate privileges. Affected product: Intel\u00ae Trace Analyzer and Collector before 2020 update 3. Ro...
Intel Trace Analyzer And Collector 代码问题漏洞
Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. A security vulnerability exists in Intel Trace Analyzer And Collector prior to version 2020 that stems from the presence of an uncontrolled search path...
UBUNTU-CVE-2023-2454
schemaelement defeats protective searchpath changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code...
CVE-2023-2644
A vulnerability, which was classified as problematic, has been found in DigitalPersona FPSensor 1.0.0.1. This issue affects some unknown processing of the file C:\Program Files x86\FPSensor\bin\DpHost.exe. The manipulation leads to unquoted search path. Attacking locally is a requirement. The...
Design/Logic Flaw
A vulnerability, which was classified as problematic, has been found in DigitalPersona FPSensor 1.0.0.1. This issue affects some unknown processing of the file C:\Program Files x86\FPSensor\bin\DpHost.exe. The manipulation leads to unquoted search path. Attacking locally is a requirement. The...
CVE-2023-2644 DigitalPersona FPSensor DpHost.exe unquoted search path
A vulnerability, which was classified as problematic, has been found in DigitalPersona FPSensor 1.0.0.1. This issue affects some unknown processing of the file C:\Program Files x86\FPSensor\bin\DpHost.exe. The manipulation leads to unquoted search path. Attacking locally is a requirement. The...
CVE-2023-2644 DigitalPersona FPSensor DpHost.exe unquoted search path
A vulnerability, which was classified as problematic, has been found in DigitalPersona FPSensor 1.0.0.1. This issue affects some unknown processing of the file C:\Program Files x86\FPSensor\bin\DpHost.exe. The manipulation leads to unquoted search path. Attacking locally is a requirement. The...
CVE-2023-2644
CVE-2023-2644 affects DigitalPersona FPSensor 1.0.0.1, specifically the DpHost.exe processing under C:\Program Files (x86)\FPSensor\bin. The root cause is an unquoted search path, enabling local access by an attacker. Impacts are described as high for confidentiality, integrity, and availability,...
PT-2023-20632 · Digitalpersona · Digitalpersona Fpsensor
Name of the Vulnerable Software and Affected Versions: DigitalPersona FPSensor version 1.0.0.1 Description: A problematic issue has been found in the processing of the file C:Program Files x86FPSensorbinDpHost.exe, leading to an unquoted search path. This issue requires local attacking to be...
HID Global DigitalPersona FPSensor 代码问题漏洞
HID Global DigitalPersona is a new method of providing authentication services to users from HID Global. A code issue vulnerability exists in HID Global DigitalPersona FPSensor version 1.0.0.1, which stems from a problem with the file C:Program Files x86FPSensorinDpHost.exe, which results in an...
Vulnerability in core server (CVE-2023-2454)
CREATE SCHEMA ... schemaelement defeats protective searchpath changes This enabled an attacker having database-level CREATE privilege to execute arbitrary code as the bootstrap superuser. Database owners have that right by default, and explicit grants may extend it to other users. The PostgreSQL...
CVE-2023-27298
Uncontrolled search path in the WULT software maintained by IntelR before version 1.0.0 commit id 592300b may allow an unauthenticated user to potentially enable escalation of privilege via network access...