CVE-2023-41149

F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running...

CVE-2023-37734

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

PT-2023-27333 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 7.3 before errata 014 Description: The issue is related to a missing argument-count bounds check in console terminal emulation, which could cause incorrect memory access and a kernel crash after receiving crafted DCS or CSI...

CVE-2023-38357

Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessions...

IBM i 安全漏洞

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i versions 7.2, 7.3, 7.4, and 7.5, which can be exploited by an attacker to elevate privileges and gain root access to the host...

CVE-2023-32000

A Cross-Site Scripting XSS vulnerability found in UniFi Network Version 7.3.83 and earlier allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an Administrator to visit a malicious web page...

PT-2023-25312 · Openbsd +2 · Openbsd +2

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 7.2 before errata 026 OpenBSD versions 7.3 before errata 004 LibreSSL versions prior to 3.6.3 LibreSSL versions 3.7.x prior to 3.7.3 Description: A double free or use after free could occur after SSL clear. This issue does no...

CVE-2023-24470

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0...

PT-2023-19625 · Micro Focus · Arcsight Logger

Name of the Vulnerable Software and Affected Versions: ArcSight Logger versions prior to 7.3.0 Description: The issue is related to Potential Cross-Site Scripting. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2023-24102 · WordPress · Katie Seaborn Zotpress

Name of the Vulnerable Software and Affected Versions: Katie Seaborn Zotpress plugin versions = 7.3.3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected devices worldwide o...

CVE-2023-23953

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation of Privilege vulnerability...

BestWeather 安全漏洞

BestWeather is a weather advisor application from BestWeather open source. A security vulnerability exists in BestWeather version v.7.3.1. An attacker exploited the vulnerability to execute code by manipulating the database...

Snap One OvrC Pro 安全漏洞

Snap One OvrC is a free cloud-based remote management and monitoring platform from Snap One USA. A security vulnerability exists in Snap One OvrC Pro versions prior to 7.3 that stems from not using an HTTPS connection, which can be exploited by an attacker to compromise an OvrC Pro device...

PT-2023-2525 · Ibm · Vios +1

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the AIX runtime services library, specifically due to the lack of neutralization of special elements use...

PT-2023-1742 · Onlyoffice · Onlyoffice Docs

Name of the Vulnerable Software and Affected Versions: ONLYOFFICE Docs versions prior to 7.3 Description: The issue is related to the use of an insecure path search in the ONLYOFFICE Docs online text document editor. Exploitation of this issue may allow an attacker to execute arbitrary code by...

IBM Spectrum Symphony 输入验证错误漏洞

IBM Spectrum Symphony is a high performance computing software system from International Business Machines IBM. A security vulnerability exists in IBM Spectrum Symphony version 7.3, which stems from incorrect validation of user input in the HOST header...

SUSE CVE-2007-1659

Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes...

SUSE CVE-2007-1662

Perl-Compatible Regular Expression PCRE library before 7.3 reads past the end of the string when searching for unmatched brackets and parentheses, which allows context-dependent attackers to cause a denial of service crash, possibly involving forward references...

SUSE CVE-2019-19246

Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in strlowercasematch in regexec.c...

SUSE CVE-2020-36382

OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service...