6712 matches found
CVE-2023-4398
An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series...
CVE-2023-4398
An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series...
CVE-2023-4398
The CVE-2023-4398 issue is an integer overflow in the QuickSec IPSec toolkit used by Zyxel device VPN features (ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, and VPN series). An unauthenticated attacker can trigger DoS by sending a crafted IKE packet, as documented in the affected firmware ranges ...
WordPress affiliate-toolkit Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)
Software affiliate-toolkit Type Plugin Vulnerable versions = 3.4.3 Fixed in 3.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46086 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2445752d85a7 Credits LEE SE HYOUNG...
Malicious code in grunt-ac-toolkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee5b34eed1211ec1daf03801aa41a40775a16812380c42cd332d788e4a55d4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8592 Malicious code in grunt-ac-toolkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee5b34eed1211ec1daf03801aa41a40775a16812380c42cd332d788e4a55d4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Telekopye Toolkit Used as Telegram Bot to Scam Marketplace Users
By Deeba Ahmed Telekopye Toolkit was previously identified in August 2023 as being leveraged for a phishing scam by Russian cybercriminals. This is a post from HackRead.com Read the original post: Telekopye Toolkit Used as Telegram Bot to Scam Marketplace Users...
Foxit PDF Editor for Mac < 2023.3 Multiple Vulnerabilities
According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 2023.3. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on...
Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.2 security and bug fix update
The Migration Toolkit for Containers MTC 1.8.2 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
CVE-2023-25080
Protection mechanism failure in some IntelR Distribution of OpenVINO toolkit software before version 2023.0.0 may allow an authenticated user to potentially enable information disclosure via local access...
Information disclosure
Protection mechanism failure in some IntelR Distribution of OpenVINO toolkit software before version 2023.0.0 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2023-27383
Protection mechanism failure in some IntelR oneAPI HPC Toolkit 2023.1 and IntelRMPI Library software before version 2021.9 may allow a privileged user to potentially enable escalation of privilege via adjacent access...
CVE-2023-27383
CVE-2023-27383 affects Intel® oneAPI HPC Toolkit and Intel® MPI Library. The issue is a protection mechanism failure that may allow a privileged user to escalate privileges via adjacent access. Affected components/versions include the HPC Toolkit before 2023.1 and the MPI Library before 2021.9. T...
CVE-2023-25080
Protection mechanism failure in some IntelR Distribution of OpenVINO toolkit software before version 2023.0.0 may allow an authenticated user to potentially enable information disclosure via local access...
Moderate: Red Hat Security Advisory: qt5-qtbase security update
An update for qt5-qtbase is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
PT-2023-21087 · Intel · Intel Oneapi Toolkit +1
Name of the Vulnerable Software and Affected Versions: IntelR oneAPI HPC Toolkit versions 2023.1 and earlier IntelRMPI Library software versions prior to 2021.9 Description: The issue is related to a protection mechanism failure in the affected software, which may allow a privileged user to...
Intel® oneAPI Toolkit and Component Advisory
Summary: Potential security vulnerabilities in some Intel® oneAPI Toolkits and Component software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-24592 Description: Path traversal in the som...
ALSA-2023:6967 Moderate: qt5-qtbase security update
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fixes: qt: buffer over-read via a crafted reply from a DNS server CVE-2023-33285 qt: allows remote attacker to bypass security restrictions caused b...
