Input validation

Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited...

Authorization

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication...

CVE-2023-5101

Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to download various files from the server via HTTP requests...

CVE-2023-5101

Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to download various files from the server via HTTP requests...

CVE-2023-5100

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted...

CVE-2023-43697

Modification of Assumed-Immutable Data MAID in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests...

PT-2023-31744 · Sick · Sick Apu Rdt400

Name of the Vulnerable Software and Affected Versions: SICK APU RDT400 affected versions not specified Description: The issue allows an unprivileged remote attacker to potentially reveal sensitive information by tricking a user into clicking on an actionable item using an iframe. This is due to...

PT-2023-31722 · Sick · Sick Apu

Name of the Vulnerable Software and Affected Versions: SICK APU affected versions not specified Description: The issue allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted. This is due to the cleartext...

ARM Mali GPU Driver Buffer Error Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. The ARM Mali GPU Driver suffers from a buffer error vulnerability that originates from a local, unprivileged user being able to perform incorrect GPU processing operations by exploiting a software race condition...

ARM Mali GPU Driver Resource Management Error Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. The ARM Mali GPU Driver suffers from a resource management error vulnerability that originates from a local, unprivileged user being able to perform incorrect GPU processing operations by exploiting a software race condition...

CVE-2023-4659 Cross-Site Request Forgery in Free5Gc

Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests without any token value. Therefore, an...

ARM Mali GPU Kernel Driver Resource Management Error Vulnerability

The ARM Mali GPU Kernel Driver is a driver for a graphics processor unit from ARM UK. The ARM Mali GPU Kernel Driver suffers from a resource management error vulnerability that originates from a local, unprivileged user being able to perform incorrect GPU memory handling operations to access free...

CVE-2023-42118

An integer underflow flaw was discovered in libspf2 library which exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. This vulnerability allows...

PT-2024-13298

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.11 Linux kernel versions through 6.8.0 Description The issue allows a physically proximate attacker to read kernel memory by mounting a filesystem and then leveraging local access to trigger an out-of-bounds...

UBUNTU-CVE-2023-5173

In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic possibly under influence of a local unprivileged webpage, leading to an out-of-bounds write to privileged process memory. This bug only affects Firefox if a non-standard preference allowin...

CVE-2023-43040

A flaw was found in rgw. This flaw allows an unprivileged user to write to any buckets accessible by a given key if a POST's form-data contains a key called 'bucket' with a value matching the bucket's name used to sign the request. This issue results in a user being able to upload to any bucket...

CVE-2023-5165

Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation ECI restrictions via the debug shell which remains accessible for a short time window after launching Docker Desktop. The affected functionality is available for Docker Business customers only and...

Design/Logic Flaw

Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation ECI restrictions via the debug shell which remains accessible for a short time window after launching Docker Desktop. The affected functionality is available for Docker Business customers only and...

Docker Desktop Security Vulnerabilities

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

PT-2023-5446 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions 4.13.0 through 4.22.x Description: The issue is related to insufficient authorization procedures in Docker Desktop, allowing an unprivileged user to bypass Enhanced Container Isolation ECI restrictions. This can be...