CVE-2023-21972 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-37704

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure...

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2023-37606)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

DSA-5390-1 chromium - security update

Bulletin has no description...

GHSA-FC4G-F42P-7RHP alextselegidis/easyappointments Improper Access Control vulnerability

alextselegidis/easyappointments 1.4.3 and prior allows one provider to view and edit others providers' appointment details. A patch is available at commit 75b24735767868344193fb2cc56e17ee4b9ac4be and anticipated to be part of version 1.5.0...

CVE-2023-29584

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp...

GHSA-CJR9-MR35-7XH6 vulnerabilities

Vulnerabilities for packages: spicedb...

BELL-CVE-2023-30630

Bulletin has no description...

OSV-2023-309 UNKNOWN READ in fmemopen_unlocked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57936 Crash type: UNKNOWN READ Crash state: fmemopenunlocked fuzz.h centipede::RunOneInput...

OSV-2023-299 UNKNOWN READ in log_set_max_level

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57912 Crash type: UNKNOWN READ Crash state: logsetmaxlevel fuzz-journal-remote.c centipede::RunOneInput...

CVE-2023-1993

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file...

FortiWeb - XSS vulnerability in HTML generated attack report files

An improper neutralization of input during web page generation CWE-79 in the FortiWeb web interface may allow an unauthenticated and remote attacker to perform a reflected cross site scripting attack XSS via injecting malicious payload in log entries used to build report...

CVE-2023-26917

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lyspstmtvalidatevalue at lysparsemem.c...

Heap-Based Buffer Overflow

libadmesh.so is vulnerable to Heap-Based Buffer Overflow. An attacker is able to cause buffer overflows by parsing a specially crafted stl file with malicious content through the stlfixnormaldirections function in normals.c...

Apache Airflow Hive Provider vulnerable to code injection

Apache Software Foundation's Apache Airflow Hive Provider before 6.0.0 is vulnerable to improper control of generation of code...

DLA-3387-1 udisks2 - security update

Bulletin has no description...

Privilege Escalation

xwayland is vulnerable to Privilege Escalation. When a client explicitly destroys the compositor overlay window, the server would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free resulting in local privilege escalation...

GHSA-582P-2FPG-X226 Microweber vulnerable to command injection

microweber/microweber prior to 1.3.3 is vulnerable to command injection in the "first name" field. This allows for server-side template injection, which can lead to arbitrary code execution...

OSV-2023-279 Heap-use-after-free in filename_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57678 Crash type: Heap-use-after-free READ 3 Crash state: filenamecmp debugstartsource parsestab...

CVE-2023-1758 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...