1965 matches found
CVE-2023-4183
A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file editupdate.php of the component Password Handler. The manipulation of the argument userid leads to improper access controls. The atta...
Inventory Management System Access Control Error Vulnerability
Inventory Management System is an inventory management system by the individual developers of stemword. An Access Control Error vulnerability exists in the SourceCodester Inventory Management System version 1.0 due to incorrect access control of the userid parameter on the editupdate.php page via...
PT-2023-5894 · Sourcecodester · Sourcecodester Inventory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Inventory Management System, affecting the file edit update.php of the component Password Handler. The manipulation of th...
Matrix-appservice-bridge Authorization Issues Vulnerability
Matrix-appservice-bridge is an open source service. It is used to bridge application services for the Matrix communication program. Matrix-appservice-bridge suffers from an authorization issue vulnerability that stems from the fact that a malicious Matrix server can use an external user's MXID in...
linux kernel security vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the linux kernel that stems from initializing the next fix iuid of a socket UID to currentfsuid...
Moderate: postgresql:15 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: schemaelement defeats protective searchpath changes CVE-2023-2454 postgresql: row security policies disregard user ID changes after inlining. CVE-2023-2455 For more details about the security...
CVE-2023-38502
creationtimestamp| type| source ---|---|--- 2023-07-26 02:27:11+00:00| seen| https://t.me/cibsecurity/67278...
Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation (CVE-2019-1585)
A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers...
CVE-2023-1386
A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the gue...
DEBIAN-CVE-2023-1386
A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the gue...
AZL-27767 CVE-2023-1386 affecting package qemu 6.2.0-26
A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the gue...
UBUNTU-CVE-2023-1386
A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the gue...
QEMU 安全漏洞
QEMU is a suite of analog processor software from the French individual developer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from an elevation of privilege vulnerability, which stems from the 9p passthrough filesystem failing to discard the SUID/SGID bit when writing t...
Information Disclosure
gitlab is vulnerable to Information Disclosure. An unauthenticated user is able to downlaod another users avatar using there user ID, resulting in disclosure of sensitive information...
CVE-2023-31753
creationtimestamp| type| source ---|---|--- 2023-07-20 14:16:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4774 2023-07-21 00:42:47+00:00| seen| https://t.me/cibsecurity/67060 2026-07-29 12:00:14+00:00| seen| https://t.me/CVEhub/17368 2026-07-30 00:00:33+00:00| seen|...
CVE-2023-35038
creationtimestamp| type| source ---|---|--- 2023-07-17 18:40:26+00:00| seen| https://t.me/cibsecurity/66828...
OESA-2023-1426 ncurses security update
The ncurses new curses library is a free software emulation of curses in System V Release 4.0 SVr4, and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr...
CVE-2023-30563
creationtimestamp| type| source ---|---|--- 2023-07-14 00:11:49+00:00| seen| https://t.me/cibsecurity/66706...
OESA-2023-1404 golang security update
The Go Programming Language Security Fixes: On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a...