9844 matches found
CVE-2023-5936
On Unix systems Linux, MacOS, Arc uses a temporary file with unsafe privileges. By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges...
CVE-2023-5936
CVE-2023-5936 affects Arc on Unix (Linux/macOS) where Arc uses a temporary file with unsafe permissions. The underlying root cause is insecure temporary data privileges, which a local attacker can tamper with to trigger arbitrary code execution with root privileges. Affected versions are Arc prio...
CVE-2023-5936 Unsafe temporary data privileges on Unix systems in Arc before v1.6.0
On Unix systems Linux, MacOS, Arc uses a temporary file with unsafe privileges. By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges...
Unsafe temporary data privileges on Unix systems in Arc before v1.6.0
Summary On Unix systems Linux, MacOS, Arc uses a temporary file with unsafe privileges. Impact By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges. Mitigation N/A Solution Upgrade to v1.6.0 or later...
CVE-2024-29889
GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability in the saved searches feature to alter another user account data take control of it. This vulnerability is fixed in 10.0.15...
CVE-2024-31456
GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability from map search. This vulnerability is fixed in 10.0.15...
bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources
A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host. This vulnerability applies only for systems where DNSSE...
CVE-2024-34062
tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments e.g. --delim, --buf-size, --manpath are passed through python's eval, allowing arbitrary code execution. This issue is only locally exploitable and had been addressed in release version 4.66.3. All user...
CVE-2023-44428
MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MuseScore. User interaction is required to exploit this vulnerability in that the target must visit a...
SUSE CVE-2023-21947
unknown...
SUSE CVE-2023-21953
unknown...
SUSE CVE-2023-21980
unknown...
SUSE CVE-2023-21972
unknown...
SUSE CVE-2023-22065
unknown...
SUSE CVE-2023-22103
unknown...
SUSE CVE-2023-22113
unknown...
SUSE CVE-2023-22115
unknown...
SUSE CVE-2024-20963
unknown...