SUSE CVE-2023-4874

Null pointer dereference when viewing a specially crafted email in Mutt 1.5.2 2.2.12...

SAP S/4HANA Code Issue Vulnerability

SAP S/4HANA is an enterprise resource management software based on the SAP HANA in-memory database system from SAP, Germany. A code issue vulnerability exists in SAP S/4HANA, which arises from a Create Single Payment application that allows an attacker to upload an XML file as an attachment and...

CVE-2023-36497

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate to admin privileges...

CVE-2023-38256

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system...

PT-2023-27931 · Sap · S/4Hana

Name of the Vulnerable Software and Affected Versions: S4 HANA versions 102 through 107 Description: The OData service of the S4 HANA, specifically in the Manage checkbook apps, allows an attacker to change the checkbook name by simulating an update OData call. Recommendations: For versions 102...

@buttercup/diag (>=0.1.0 <=0.2.0), bcup-cli (>=1.0.0 <=1.2.0) +2 more potentially affected by CVE-2023-41646 via buttercup (>=3.0.0 <=6.17.2)

buttercup NPM version =3.0.0, =0.1.0, =1.0.0, =1.0.1, =0.2.3, =0.2.4 Source cves: CVE-2023-41646 Source advisory: OSV:GHSA-7CWQ-P8CR-H9QG...

HashiCorp Terraform Path Traversal Vulnerability

HashiCorp Terraform is an open source tool for provisioning and managing cloud infrastructure from HashiCorp, USA. A security vulnerability exists in Terraform versions 1.0.8 through 1.5.6, which stems from allowing arbitrary files to be written during an init operation...

PT-2023-23104 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex versions 4.0 through 4.4.2 IBM Aspera Faspex versions 5.0 through 5.0.5 Description: The issue allows a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. Recommendations: For IBM...

PT-2023-27825 · F-Revocrm · F-Revocrm

Name of the Vulnerable Software and Affected Versions: F-RevoCRM versions 7.3.0 through 7.3.7 Description: The issue is a cross-site scripting vulnerability. If exploited, it allows an arbitrary script to be executed on the web browser of the user using the product. Recommendations: For versions...

agent-actors (=0.1.0), agent-lab-sdk (>=0.1.7 <=0.1.16) +249 more potentially affected by CVE-2023-39631 via langchain (>=0.0.100 <=0.0.306)

langchain PYPI version =0.0.100, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.5, =0.0.14, =0.1.9, =0.0.33, =0.0.40 and more Source cves: CVE-2023-39631 Source advisory: OSV:GHSA-F73W-4M7G-CH9X...

CVE-2023-39582

SQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged attacker to obtain sensitive information via the import sessions functions...

PT-2023-16858 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 4.1 through 16.1.4 GitLab versions 16.2 through 16.2.4 GitLab versions 16.3 through 16.3.0 Description: An issue has been discovered in GitLab where it was possible to create a URL that would redirect to a different project...

Security Bulletin: A vulnerability in Microsoft ASP.NET affects IBM Robotic Process Automation and may result in a denial of service (CVE-2022-29117)

Summary Microsoft ASP.NET is used by IBM Robotic Process Automation as part of the application framework. CVE-2022-29117 Vulnerability Details CVEID:CVE-2022-29117 DESCRIPTION: Microsoft ASP.NET and Visual Studio are vulnerable to a denial of service. By sending a specially-crafted request, a...

PT-2023-24637 · Unknown · Rakib Hasan Dynamic Qr Code Generator

Name of the Vulnerable Software and Affected Versions: Rakib Hasan Dynamic QR Code Generator plugin versions 0.0.0 through 0.0.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the...

VulnCheck KEV: CVE-2023-35708

In Progress MOVEit Transfer before 2021.0.8 13.0.8, 2021.1.6 13.1.6, 2022.0.6 14.0.6, 2022.1.7 14.1.7, and 2023.0.3 15.0.3, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access...

@a-la-fois/doc-handler (>=0.0.6 <=0.0.16), @a-la-fois/models (>=0.0.3 <=0.0.16) +375 more potentially affected by CVE-2021-32050 via mongodb (>=4.0.1 <=4.16.0)

mongodb NPM version =4.0.1, =0.0.6, =0.0.3, =0.1.66, =0.5.134, =3.9.0, =0.0.1, =2.0.0-beta, =0.1.0, =2.0.0-beta.3, =1.4.5, =1.1.217, =0.0.1, =0.0.1, =0.1.0, =3.0.14 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...

@emiliogonzalezpe/comp (>=1.6.0 <=1.6.1), @monax/hoard (>=9.0.0-dev.5644f38 <=9.1.0) +80 more potentially affected by CVE-2023-41037 via openpgp (>=0.11.1 <=4.10.10)

openpgp NPM version =0.11.1, =1.6.0, =9.0.0-dev.5644f38, =1.0.1, =0.0.1, =1.6.0, =1.4.0, =1.6.0, =0.0.0-semantic-release, =0.4.2, =0.0.1, =0.1.0, =0.3.0 and more Source cves: CVE-2023-41037 Source advisory: OSV:GHSA-CH3C-V47X-4PGP...

Badaso 跨站脚本漏洞

Badaso is an open source Laravel Vue headless CMS from Uasoft. A security vulnerability exists in Badaso versions v.0.0.1 through v.2.9.7, which stems from a vulnerability that allows remote attackers to execute arbitrary code via a crafted payload on the rack number parameter in the add new rack...

IBM Storage Copy Data Management 加密问题漏洞

IBM Storage Copy Data Management is a data storage system from International Business Machines IBM. A security vulnerability exists in IBM Storage Copy Data Management versions 2.2.0.0 through 2.2.19.0 that stems from the use of an insufficiently strong encryption algorithm...

PT-2023-26578 · Ibm · Ibm Storage Copy Data Management

Name of the Vulnerable Software and Affected Versions: IBM Storage Copy Data Management versions 2.2.0.0 through 2.2.19.0 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information...