USN-6832-1 virtuoso-opensource vulnerabilities

Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL statements. An attacker could possibly use this issue to crash the program, resulting in a denial of service. CVE-2023-31607, CVE-2023-31608, CVE-2023-31609, CVE-2023-31610, CVE-2023-31611,...

SUSE CVE-2024-23793

The file upload feature in OTRS and OTRS Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl...

UBUNTU-CVE-2024-35190

Asterisk is an open source private branch exchange and telephony toolkit. After upgrade to 18.23.0, ALL unauthorized SIP requests are identified as PJSIP Endpoint of local asterisk server. This vulnerability is fixed in 18.23.1, 20.8.1, and 21.3.1...

Adobe Animate 代码问题漏洞

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. A code issue vulnerability exists in Adobe Animate versions 24.0.2 and 23.0.5, which stems from being affected by a null pointer dereference vulnerability. An attacker could use this vulnerability to cause...

Intel Wireless Bluetooth 安全漏洞

Intel Wireless Bluetooth is a driver tool from Intel USA that can effectively solve some problems with intel bluetooth in win10 system. A security vulnerability exists prior to Intel Wireless Bluetooth version 23.20, which stems from the presence of an improper condition checking issue. It could...

CVE-2023-44415

D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1260 and DIR-2150 routers. Authentication is required to exploit this vulnerability. The specif...

CVE-2023-44416

D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622. Authentication is required to exploit this vulnerability. The specific flaw exists within...

CVE-2023-40478

NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, th...

CVE-2023-35724

D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specif...

PT-2024-3168 · Juniper Networks · Containerized Routing Protocol Daemon +1

Name of the Vulnerable Software and Affected Versions: Juniper Cloud Native Router JCNR versions prior to 23.4 Containerized Routing Protocol Daemon cRPD versions prior to 23.4R1 Description: The issue is related to the use of hard-coded cryptographic keys in Juniper Cloud Native Router JCNR and...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 11 Version 22...

Ericsson Network Manager 安全漏洞

Ericsson Network Manager is a network manager from Ericsson Sweden. It covers monitoring, troubleshooting, configuration, automation and optimization of networks. A security vulnerability exists in Ericsson Network Manager ENM versions prior to 23.1, which originates from improperly neutralized...

AZL-37105 CVE-2024-30202 affecting package emacs for versions less than 29.3-1

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23...

PT-2024-2291 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Adobe Animate versions 24.0, 23.0.3 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Animate, which could lead to the disclosure of sensitive memory. An attacker could leverage this vulnerability t...

CVE-2023-51486

creationtimestamp| type| source ---|---|--- 2024-03-16 03:21:34+00:00| seen| https://t.me/ctinow/209298 2024-03-16 03:26:17+00:00| seen| https://t.me/ctinow/209306...

CVE-2023-7009

creationtimestamp| type| source ---|---|--- 2024-03-15 18:27:02+00:00| seen| https://t.me/ctinow/209010...

PT-2024-21208 · Unknown · My Calendar

Name of the Vulnerable Software and Affected Versions: My Calendar versions through 3.4.23 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious scripts...

Microsoft Windows Compressed Folder Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Compressed Folder. The following products and versions are affected: Windows 11 Version 22H2 for ARM64-based Systems,Windows 11...

OpenText Documentum D2 Security Vulnerability

OpenText Documentum D2 is a component of an Enterprise Content Management ECM solution from OpenText. A security vulnerability exists in OpenText Documentum D2 versions 16.5.1 through CE 23.2. An attacker can exploit the vulnerability to upload arbitrary code and execute code on a client computer...

CVE-2023-52588

creationtimestamp| type| source ---|---|--- 2024-03-06 23:57:03+00:00| seen| https://t.me/ctinow/201939 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...