13097 matches found
BELL-CVE-2023-3269
Bulletin has no description...
PT-2023-3475 · Siemens · Simatic Cn 4100
Name of the Vulnerable Software and Affected Versions: SIMATIC CN 4100 versions prior to V2.5 Description: The issue is related to errors in access management, specifically improper access controls in configuration files, which can lead to privilege escalation. An attacker, acting remotely, could...
DSA-5451-1 thunderbird - security update
Bulletin has no description...
CVE-2020-22336
An issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code via a stack overflow in the MD5 function...
CVE-2023-37208
When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13...
WP RSS Images <= 1.1 - Cross-Site Request Forgery
The plugin does not adequately verify requests use nonces, leading to a potential Cross-Site Request Forgery vulnerability...
CVE-2023-36611
The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens...
CVE-2023-36610
The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successful...
CVE-2023-36611
The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens...
CVE-2023-36610
The CVE-2023-36610 issue affects Ovarro TBox RTUs, where software security tokens are generated with insufficient entropy due to an uninitialized random seed and time-based values in other token components. This weakness can allow an attacker to brute-force tokens and authenticate, per multiple s...
CVE-2023-36610
The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successful...
PT-2023-25632 · Tbox Rtus · Tbox Rtus
Name of the Vulnerable Software and Affected Versions: TBox RTUs affected versions not specified Description: The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of...
CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
ASB-A-280380543
Bulletin has no description...
ASB-A-226921651
Bulletin has no description...
ASB-A-276751076
Bulletin has no description...
ASB-A-274005916
Bulletin has no description...
MGASA-2023-0209 Updated sofia-sip packages fix security vulnerability
The OOB read and integer-overflow made by attacker may lead to crash, high consumption of memory or even other more serious consequences. CVE-2023-32307...
Arbitrary File Upload
zoujingli/thinkadmin is vulnerable to Arbitrary File Upload. The vulnerability exists because the library does not properly validate files uploaded via api/upload.php, which allows an attacker to bypass the file upload restrictions and execute malicious code on the system...