PT-2023-26575 · Ibm · Ibm I +1

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.2 through 7.5 Description: The Facsimile Support for i product in IBM i contains a local privilege escalation issue. A malicious actor could gain access to a command line with elevated privileges, allowing root access to the...

UBUNTU-CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

CVE-2023-27392

Incorrect default permissions in the IntelR Support android application before version v23.02.07 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-27392

Incorrect default permissions in the IntelR Support android application before version v23.02.07 may allow a privileged user to potentially enable information disclosure via local access...

Information disclosure

Incorrect default permissions in the IntelR Support android application before version v23.02.07 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-27392

The CVE-2023-27392 entry concerns the Intel(R) Support Android app prior to v23.02.07, where incorrect default permissions may allow a privileged user to disclose information via local access. Affected product: Intel(R) Support Android app; root cause: insecure default permissions; impact: potent...

CVE-2023-27392

Incorrect default permissions in the IntelR Support android application before version v23.02.07 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-27392

Incorrect default permissions in the IntelR Support android application before version v23.02.07 may allow a privileged user to potentially enable information disclosure via local access...

Unable to list or change the Master Image for a MCS catalog in Studio

Unable to list or change the Master Image for a MCS catalog in Studio. Error Cannot find path 'XDHyp:\HostingUnits\\image.folder\undefined.sharedsubscription' because it does not exist. For details, click here. If the problem persists, contact Citrix Technical Support. Transaction ID:...

Intel Support android security vulnerability

Intel Support Android is an Android application from Intel Corporation USA. A security vulnerability exists in the IntelR Support android application prior to version v23.02.07, which stems from incorrect default permissions. An attacker can exploit the vulnerability to obtain sensitive informati...

CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

Users can delete external storage mount points

None...

Notes attachment render HTML in preview mode

None...

user_oidc app stores client secret unencrypted in database

None...

Issuer not verified from obtained token in user_oidc

None...

CVE-2023-39776

The CVE-2023-39776 entry concerns PHPJabbers Ticket Support Script v3.2 with a File Upload vulnerability that allows an attacker to execute arbitrary code by uploading a crafted file. Documents consistently identify the affected product and version, and cite an unrestricted file upload root cause...

PT-2023-27102 · Phpjabbers · Phpjabbers Ticket Support Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: A File Upload issue allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For PHPJabbers Ticket Support Script version 3.2, consider disabling file...

CVE-2023-39776

A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file...

Ticket Support Script Code Issue Vulnerability

Ticket Support Script is an affordable online help desk system. A security vulnerability exists in Ticket Support Script version v3.2. The vulnerability can be exploited by an attacker to execute arbitrary code by uploading a specially crafted file...