UBUNTU-CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmpdecode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets...

AZL-26247 CVE-2023-29383 affecting package shadow-utils for versions less than 4.9-13

In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn change finger. Although it is not possible to exploit this directly e.g., adding a new user fails because \n is in the block list, it is possible to misrepresent the /etc/passwd file when...

UBUNTU-CVE-2023-29383

In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn change finger. Although it is not possible to exploit this directly e.g., adding a new user fails because \n is in the block list, it is possible to misrepresent the /etc/passwd file when...

PT-2023-9380 · Shadow +3 · Shadow +3

Name of the Vulnerable Software and Affected Versions: Shadow version 4.13 Description: The issue is related to insufficient neutralization of special elements in a request, which can be exploited to impact data integrity. In Shadow 4.13, it is possible to inject control characters into fields...

PT-2023-21404 · Sap · Sap Crm

Name of the Vulnerable Software and Affected Versions: SAP CRM versions 700 through 713 Description: The issue allows an authenticated attacker with a non-administrative role and common remote execution authorization to use a vulnerable interface and execute an application function, performing...

SAP CRM 代码注入漏洞

SAP CRM is a customer relationship management system from SAP, a German company. A code injection vulnerability exists in SAP CRM versions 700, 701, 702, 712, and 713. An attacker could exploit this vulnerability to compromise the confidentiality and integrity of data and availability...

CVE-2023-28792

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin = 1.0.15 versions...

CVE-2023-28792 WordPress Continuous Image Carousel With Lightbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin = 1.0.15 versions...

CVE-2023-28792

CVE-2023-28792 affects the WordPress plugin Continuous Image Carousel With Lightbox (WordPress plugin)

CVE-2023-0580

Insecure Storage of Sensitive Information vulnerability in ABB My Control System on-premise allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System...

PT-2023-3259 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.13 GLPI versions prior to 10.0.7 Description: The issue is related to a lack of authorization, allowing a user with the Technician profile to view and generate a personal token for a Super-Admin. This can be exploit...

PT-2023-17878 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a missing bounds check in the nci snd set routing cmd function of nci hmsgs.cc, which could lead to a possible out of bounds write. This might result in remot...

NVIDIA GPU Display Driver for Windows 安全漏洞

NVIDIA GPU Display Driver for Windows is a driver software from NVIDIA Corporation that is used for interactive support of graphics card display modules in Windows systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from not properly checking memory permissions,...

NVIDIA GPU Display Driver for Linux 缓冲区错误漏洞

NVIDIA GPU Display Driver for Linux is a driver from NVIDIA Corporation that is used for interactive support of graphics card display modules in Linux systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from the presence of an out-of-bounds write, which could lea...

PT-2023-4206 · Apple · Webkit +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: The issue is related to a type confusion problem in the WebKit PDF module, which can be exploited by a remote attacker to execute arbitrary cod...

PT-2023-21630 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: A buffer overflow issue was addressed with improved memory handling, which may allow an app to cause unexpected system termination or write kernel memory. Recommendations: For versions prior to 13.3,...

PT-2023-21455 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS versions prior to 12.6.4 macOS versions prior to 11.7.5 Description: A logic issue was addressed with improved checks, which could allow an app to modify protected parts of the file system. Recommendations:...

PT-2023-23786 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: A logic issue was addressed with improved checks, which may have allowed an app to gain root privileges. Recommendations: For versions prior to 13.3, update to macOS Ventura 13.3 to resolve the issue...

PT-2023-21444 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Monterey versions prior to 12.6.4 iOS versions prior to 15.7.4 iPadOS versions prior to 15.7.4 Description: An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously...

PT-2023-21635 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 Description: A buffer overflow issue was addressed with improved memory handling. This issue may allow an app to cause unexpected system termination or write kernel memory. Recommendations: For versions prior to...