Use After Free

Firefox is vulnerable to Use After Free. The vulnerability is caused while creating TLS socket under memory pressure. This can lead to compromising Confidentiality, Integrity and Availability of the system...

PT-2023-8156 · Voltronic Power · Voltronic Power Viewpower

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower affected versions not specified Description: This issue allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower. The specific flaw exists within the updateManagerPasswo...

New Windows/Linux Firmware Attack

Interesting attack based on malicious pre-OS logo images: LogoFAIL is a constellation of two dozen newly discovered vulnerabilities that have lurked for years, if not decades, in Unified Extensible Firmware Interfaces responsible for booting modern devices that run Windows or Linux…. The...

CVE-2023-49283

The CVE-2023-49283 issue affects the Microsoft Graph Core PHP SDK (vendor/microsoft/microsoft-graph-core) where test code in GetPhpInfo.php calls phpinfo(), enabling information disclosure if the server misconfigures access to the vendor directory. Affected: Microsoft Graph Core PHP SDK prior to ...

Foxit Reader Type Obfuscation Vulnerability (CNVD-2023-96088)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A type confusion vulnerability exists in Foxit Reader before version 12.1.2.15356, which can be exploited by an attacker to execute arbitrary code on the system...

Foxit Reader Memory Misreference Vulnerability (CNVD-2023-96092)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A memory misreference vulnerability exists in Foxit Reader before version 12.1.2.15356, which can be exploited by an attacker to execute arbitrary code on the system...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Babel

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Babel. Vulnerability Details CVEID: CVE-2023-45133 DESCRIPTION: Babel could allow a local attacker to execute arbitrary code on the system, caused by a flaw in the path.evaluateor path.evaluateTruth...

Remote Code Execution

GIMP GNU Image Manipulation Program is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a parsing flaw which allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSP file. This can lead to the execution of unauthorized code within the...

Remote Code Execution

GIMP GNU Image Manipulation Program is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a parsing flaw which allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSP file. This can lead to the execution of unauthorized code within the...

Remote Code Execution (RCE)

uptime-kuma is vulnerable to Remote Code Execution RCE. The vulnerability is due to input validation for the hostname field being solely implemented on the client-side front-end JavaScript code which means that an attacker can circumvent the validation by modifying the HTML code of the input fiel...

Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2023-91788)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. An out-of-bounds read vulnerability exists in Adobe After Effects versions...

Adobe Audition Out-of-Bounds Write Vulnerability (CNVD-2023-88381)

Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product mainly uses a comprehensive toolset that includes multi-track, waveform and spectral display to mix, edit and create audio content. An out-of-bounds write vulnerability exists in Adobe Auditi...

The vulnerability of the sssd component in the basic operating system of the Photon OS platform, which is used for managing cloud storage solutions like VMware Cloud Director, allows a hacker to gain increased privileges.

The vulnerability of the sssd component in the basic operating system of the Photon OS platform, which is used for managing cloud storage in VMware Cloud Director, relates to the possibility of bypassing authentication. Exploiting this vulnerability allows a malicious actor to gain increased...

7 common mistakes companies make when creating an incident response plan and how to avoid them

Cisco Talos recently covered the basics of NIS2, a new set of requirements for cybersecurity and security incident disclosures set to take effect next year in the European Union. As part of these new guidelines, organizations with operations in the EU must have up-to-date "incident handling"...

CVE-2023-41718

When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a specific file...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Xxe

A vulnerability has been identified in Siemens OPC UA Modelling Editor SiOME All versions V2.8. Affected products suffer from a XML external entity XXE injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary...

The vulnerability of the Management Central component of the IBM i operating system, which allows attackers to escalate their privileges.

The vulnerability of the Management Central component of the IBM i operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to components of the operating system...

CVE-2023-4535

An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to...

Cross site scripting

An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to...