ASB-A-271846393

In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-262236273

In multiple functions of staiface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-262245630

In initiateVenueUrlAnqpQueryInternal of staiface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-262235736

In addGroupWithConfigInternal of p2piface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-32217 SailPoint IdentityIQ Unsafe use of Reflection Vulnerability

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p3, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p6, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow an authenticated user to invoke a Java constructor with no arguments...

CVE-2023-2983

Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23...

CVE-2023-2983

Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23...

Privilege escalation

Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23...

CVE-2023-2983 Privilege Defined With Unsafe Actions in pimcore/pimcore

Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23...

The vulnerability of the `git_config_copy_or_rename_section_in_file` function in the `config.c` file of a distributed version control system like Git allows a attacker to execute arbitrary code.

The vulnerability of the gitconfigcopyorrenamesectioninfile function in the distributed version control system Git’s config.c file is related to insufficient neutralization of special elements in the request. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2023-2983 Privilege Defined With Unsafe Actions in pimcore/pimcore

Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23...

CVE-2023-2983 Privilege Defined With Unsafe Actions in pimcore/pimcore

Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23...

CVE-2023-2983

CVE-2023-2983 affects pimcore/pimcore prior to 10.5.23. The flaw enables privilege escalation via unsafe actions in the application logic (notably related to updateAction in UserController.php per Veracode report). Impact is administrator access from a low-privilege user; public CVSS metrics show...

golang: html/template: improper handling of JavaScript whitespace

A flaw was found in golang, where not all valid JavaScript white-space characters were considered white space. Due to this issue, templates containing white-space characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be...

SourceCodester Class Scheduling System 跨站脚本漏洞

Class Scheduling System is a class scheduling system by jkev individual developer. A cross-site scripting vulnerability exists in SourceCodester Class Scheduling System version 1.0, which is caused by unknown code in the file searchteacherresult.php in the component POST Parameter Handler, leadin...

mina-sshd: Java unsafe deserialization vulnerability

A flaw was found in Apache MINA SSHD, when using Java deserialization to load a serialized java.security.PrivateKey. An attacker could benefit from unsafe deserialization by inserting unsecured data that may affect the application or server...

SnakeYaml: Constructor Deserialization Remote Code Execution

A flaw was found in the SnakeYaml package. This flaw allows an attacker to benefit from remote code execution by sending malicious YAML content and this content being deserialized by the constructor. Deserialization is unsafe and leads to Remote Code Execution RCE...

ctags: arbitrary command execution via a tag file with a crafted filename

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

git: Bypass of safe.directory protections

A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system when running commands specified in the local repository configuration. This issue allows the owner of the repository to cause arbitrary commands to be executed by...

PT-2023-16328 · WordPress · Rapidexpcart

Name of the Vulnerable Software and Affected Versions: RapidExpCart WordPress plugin versions through 1.0 Description: The issue is related to a Stored Cross-Site Scripting vulnerability. It occurs because the url parameter in the "rapidexpcart" endpoint is not properly sanitized and escaped befo...