13097 matches found
CVE-2023-41915
OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0...
GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
Exploit Title: GOM Player 2.3.90.5360 - Remote Code Execution RCE Date: 26.08.2023 Author: M. Akil Gündoğan Contact: https://twitter.com/akilgundogan Vendor Homepage: https://www.gomlab.com/gomplayer-media-player/ Software Link: https://cdn.gomlab.com/gretech/player/GOMPLAYERGLOBALSETUPNEW.EXE...
CVE-2023-4781 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873...
SQL Injection
dataease-plugin-common is vulnerable to SQL Injection. The vulnerability exists through the PluginGridSql.xml due to the lack of query validation, allowing an attacker to gain sensitive information via a maliciously crafted string outside the blacklist function...
BELL-CVE-2023-4752
Bulletin has no description...
PT-2023-26429 · Unknown · Vowifiservice
Name of the Vulnerable Software and Affected Versions: vowifiservice affected versions not specified Description: The issue is related to a possible missing permission check in vowifiservice. This could lead to local escalation of privilege with no additional execution privileges. Recommendations...
PT-2023-24036 · Power · Power
Name of the Vulnerable Software and Affected Versions: In power affected versions not specified Description: The issue is related to a possible out of bounds write due to an insecure default value, which could lead to local escalation of privilege. System execution privileges are needed for...
Path Traversal
gitpython is vulnerable to Path Traversal. The vulnerability exists in getrefinfohelper function of symbolic.py because it does not properly validate the local file path, which allows an attacker to access files outside the expected directory...
MAL-2023-7981 Malicious code in emon-test-emon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 070f47b075b6837108f6bf3ee63c44f7a41728c57a578783719968e8f4887ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ASB-A-273966636
In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-285903027
Bulletin has no description...
BELL-CVE-2022-4883 CVE-2022-4883 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-1579
Bulletin has no description...
BELL-CVE-2023-29383
Bulletin has no description...
Path traversal in Zip Swift
An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...
OSV-2023-761 Heap-buffer-overflow in ICMPinfo::dissectICMP
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61836 Crash type: Heap-buffer-overflow READ 4 Crash state: ICMPinfo::dissectICMP NetworkInterface::processPacket NetworkInterface::dissectPacket...
MAL-2023-7953 Malicious code in eslint-config-lotus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ba1072b1cafbf26acefbf4bcb39b7c50dde7784a213dd5895444e43a0947326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-39663
Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service ReDoS vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk...
