PT-2023-24173 · Unknown · Whaleal Icefrog +1

Name of the Vulnerable Software and Affected Versions: whaleal IceFrog version 1.1.8 Description: A problematic vulnerability has been found in the Aviator Template Engine component, leading to deserialization of untrusted data. The manipulation with this issue may be used since the exploit has...

c-ares: Insufficient randomness in generation of DNS query IDs

A vulnerability was found in c-ares. This issue occurs when /dev/urandom or RtlGenRandom are unavailable, c-ares will use rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand, so it will generate predictable output...

c-ares: Insufficient randomness in generation of DNS query IDs

A vulnerability was found in c-ares. This issue occurs when /dev/urandom or RtlGenRandom are unavailable, c-ares will use rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand, so it will generate predictable output...

PT-2023-25044 · Ujcms · Ujcms

Name of the Vulnerable Software and Affected Versions: Ujcms version 6.0.2 Description: An issue in Ujcms allows attackers to gain sensitive information via the dir parameter to the "/api/backend/core/web-file-html/download-zip" API endpoint. Recommendations: For Ujcms version 6.0.2, as a tempora...

PT-2023-3645 · D Link · D-Link Dsl-G256Dg +1

Name of the Vulnerable Software and Affected Versions: D-Link DSL-224 version 3.0.10 D-Link DSL-G256DG affected versions not specified Description: The issue is related to a command execution vulnerability that can be exploited after authentication. It is associated with deficiencies in the...

Microsoft SharePoint 安全漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

PT-2023-3119 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the Windows DNS service. This can allow a remote attacker to conduct spoofing attacks...

PT-2024-20952 · Imlib2 +1 · Imlib2 +1

Name of the Vulnerable Software and Affected Versions: imlib2 version 1.9.1 Description: The issue is related to the mishandling of memory allocation in the function init imlib fonts. Recommendations: For imlib2 version 1.9.1, consider disabling the init imlib fonts function until a patch is...

CVE-2023-1388

A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory block, resulting in the service becoming unavailable...

CVE-2023-1388

A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory block, resulting in the service becoming unavailable...

PT-2023-17612 · Swpm · Swpm

Name of the Vulnerable Software and Affected Versions: swpm affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction...

PT-2023-22331 · Unknown +3 · Advancecomp +3

Name of the Vulnerable Software and Affected Versions: Advancecomp affected versions not specified Description: A segmentation fault flaw was found in the Advancecomp package, which may lead to decreased availability. Recommendations: At the moment, there is no information about a newer version...

PT-2023-17596 · Vcu · Vcu

Name of the Vulnerable Software and Affected Versions: vcu affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction ...

PT-2023-24481 · Emedia Consulting · Simpleredak

Name of the Vulnerable Software and Affected Versions: eMedia Consulting simpleRedak versions up to 2.47.23.05 Description: A stored cross-site scripting XSS issue was found in the component "/de/casting/show/detail/". Recommendations: For versions up to 2.47.23.05, consider restricting access to...

Cross site scripting

Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled. A probable stored cross-site scripting vulnerability is present in Formcreator 2.13.5 and prior via the use of the use of FULLFORM for rendering. This could result in...

Nextcloud Calendar 安全漏洞

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Calendar v4.2.2 and earlier, v3.5.4 and earlier, which stems from the disclosure of certain internal paths to ...

编号已被CVE保留

No details are available at this time...

AZL-43702 CVE-2023-31147 affecting package python-pycares 3.1.1-3

c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand so will generate predictable output. Input from the random number generator i...

PT-2023-36182 · Google · Go

Name of the Vulnerable Software and Affected Versions: golang-github-vpenso-prometheus slurm exporter affected versions not specified Description: The issue is related to a security release in go 1.19. The package golang-github-vpenso-prometheus slurm exporter has been rebuilt with this security...

PT-2023-36311 · Unknown · Calamares-Settings-Ubuntu

Name of the Vulnerable Software and Affected Versions: calamares-settings-ubuntu affected versions not specified Description: It was discovered that calamares-settings-ubuntu allowed creating the first user with a blank password, contrary to expectations. Recommendations: At the moment, there is ...