3021 matches found
CVE-2023-4128 affecting package kernel for versions less than 5.15.126.1-1
CVE-2023-4128 affecting package kernel for versions less than 5.15.126.1-1. A patched version of the package is available...
CVE-2023-39562
GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gfbsalign function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted file...
CVE-2021-25786
An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to PlASCII85Decoder::write parameter in libqpdf...
CVE-2023-38429 affecting package kernel for versions less than 5.15.122.1-2
CVE-2023-38429 affecting package kernel for versions less than 5.15.122.1-2. A patched version of the package is available...
CVE-2023-3863 affecting package kernel for versions less than 5.15.122.1-2
CVE-2023-3863 affecting package kernel for versions less than 5.15.122.1-2. A patched version of the package is available...
CVE-2022-20565
Removed by vendor...
CVE-2023-36808
GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI inventory request can be used to perform a SQL injection attack. Version 10.0.8 has a patch for this issue. As a workaround, one may disable native...
CVE-2023-34107
GLPI is a free asset and IT management software package. Versions of the software starting with 9.2.0 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user, allows access to the view all KnowbaseItems. Version 10.0.8 has a patch for this issue...
CVE-2023-34106
GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user. This allows access to the list of all users and their personal information. Users should...
CVE-2023-34256 affecting package kernel for versions less than 5.15.116.1-1
CVE-2023-34256 affecting package kernel for versions less than 5.15.116.1-1. A patched version of the package is available...
CVE-2023-3128
Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app...
CVE-2023-34623
An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-33969
Kanboard is open source project management software that focuses on the Kanban methodology. A stored Cross site scripting XSS allows an attacker to execute arbitrary Javascript and any user who views the task containing the malicious code will be exposed to the XSS attack. Note: The default CSP...
CVE-2023-33956
Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object reference IDOR vulnerability present in the application's URL parameter. This vulnerability enables any user to read files uploaded by any...
CVE-2023-33970
Kanboard is open source project management software that focuses on the Kanban methodology. A vulnerability related to a missing access control was found, which allows a User with the lowest privileges to leak all the tasks and projects titles within the software, even if they are not invited or...
CVE-2023-1668 affecting package openvswitch for versions less than 2.17.5-2
CVE-2023-1668 affecting package openvswitch for versions less than 2.17.5-2. A patched version of the package is available...
freerdp: clients using `/parallel` command line switch might read uninitialized data
A vulnerability was found in FreeRDP where clients on UNIX systems using /parallel command line switch might read uninitialized data and send it to the client's server. The vulnerability allows a remote attacker to gain access to sensitive information...
CVE-2023-1855 affecting package kernel for versions less than 5.15.107.1-2
CVE-2023-1855 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...