PT-2023-2138 · Unknown · Xiaozhuai Imageinfo

Name of the Vulnerable Software and Affected Versions: xiaozhuai imageinfo versions up to 3.0.3 Description: A buffer overflow issue has been found in the imageinfo.hpp file of the xiaozhuai imageinfo library. This issue is related to the copying of a buffer without checking the size of the input...

PT-2023-20249

Name of the Vulnerable Software and Affected Versions Apache Airflow Google Provider versions prior to 8.10.0 Description The issue is related to an Improper Input Validation vulnerability in the Apache Airflow Google Provider. This vulnerability can potentially lead to a Denial of Service and...

GHSA-MRPV-5PMR-P92H Improper Privilege Management in Apache Sling

Privilege Escalation vulnerability in Apache Software Foundation Apache Sling. Any content author is able to create i18n dictionaries in the repository in a location the author has write access to. As these translations are used across the whole product, it allows an author to change any text or...

PT-2023-12777 · Sdd-Baro · Sdd-Baro

Name of the Vulnerable Software and Affected Versions: SDD-Baro versions prior to 2.8.432 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

KLA48514 Multiple vulnerabilities in Foxit PDF Reader

Use After Free vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Original advisories Security updates available in Foxit PDF Reader 11.2.1 and Foxit PDF Editor 11.2.2 Related products Foxit-Reader...

PT-2023-16347 · WordPress · Gs Books Showcase

Name of the Vulnerable Software and Affected Versions: GS Books Showcase WordPress plugin versions prior to 1.3.1 Description: The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some shortcode...

PT-2023-15907 · WordPress · Backupbuddy

Name of the Vulnerable Software and Affected Versions: BackupBuddy WordPress plugin versions prior to 8.8.3 Description: The issue is related to Reflected Cross-Site Scripting. It occurs because the BackupBuddy WordPress plugin does not properly sanitise and escape some parameters before outputti...

PT-2023-3226 · Freeimage +2 · Freeimage +2

Name of the Vulnerable Software and Affected Versions: Freeimage version 3.18.0 Description: The issue is related to a buffer overflow vulnerability in the Freeimage library, which can be exploited by reading data beyond the buffer boundaries in memory. This can allow an attacker to cause a denia...

PHPFusion < 9.03.100 DoS Vulnerability

PHPFusion is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

PT-2023-13776 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.0.3.7 IBM Sterling B2B Integrator Standard Edition versions 6.1.0.0 through 6.1.2.0 Description: The issue is related to improper access controls, which could allow an...

AZL-13673 CVE-2023-25173 affecting package moby-containerd for versions less than 1.6.18-2

containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be ab...

DEBIAN-CVE-2023-25173

containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be ab...

PT-2023-13483 · Intel · Intel Ethernet Network Controllers/Adapters E810 Series +1

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Network Controllers and Adapters E810 Series versions prior to 1.7.0.8 IntelR Ethernet 700 Series Controllers and Adapters versions prior to 9.101 Description: The issue is related to an out-of-bounds write in firmware, which...

PT-2023-12900 · Cvat · Cvat

Name of the Vulnerable Software and Affected Versions: CVAT versions prior to 2.0.1 Description: The issue allows an authenticated user to potentially enable information disclosure via network access due to server-side request forgery. Recommendations: For versions prior to 2.0.1, update to versi...

PT-2023-1534 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: FortiWeb versions 7.0.1 and below FortiWeb versions 6.4 and below FortiWeb versions 6.3 and below FortiWeb versions 6.2 and below Description: The issue is related to incorrect restriction of a directory path name with limited access in the...

PT-2023-13491 · Intel · Intel Ethernet 500 Series Controller Drivers

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 500 Series Controller drivers for VMware versions prior to 1.10.0.13 Description: The issue is related to a protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware, which may allow an...

PT-2023-13237 · Intel · Intel Sur

Name of the Vulnerable Software and Affected Versions: IntelR SUR software versions prior to 2.4.8902 Description: The issue is related to improper input validation, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions...

PT-2023-13502 · Intel · Intel Sps Firmware

Name of the Vulnerable Software and Affected Versions: IntelR SPS firmware versions prior to SPS E3 06.00.03.300.0 Description: The issue is related to an improper condition check in the IntelR SPS firmware, which may allow a privileged user to potentially enable denial of service via local acces...

SUSE CVE-2022-21702

Grafana is an open-source platform for monitoring and observability. In affected versions an attacker could serve HTML content thru the Grafana datasource or plugin proxy and trick a user to visit this HTML page using a specially crafted link and execute a Cross-site Scripting XSS attack. The...

SA40166 - Remote desktop protocol (RDP) client restriction bypass issue

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A security issue was discovered in the PCS Terminal Services Remote Desktop Protocol RDP client session restrictions feature. By exploiting this issue a malicious authenticated user...