MGASA-2023-0290 Updated ghostscript packages fix security vulnerability

The updated packages fix a security vulnerability: In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated...

PT-2023-6013 · Fortinet · Fortisandbox

Name of the Vulnerable Software and Affected Versions: FortiSandbox versions 2.4.1, 2.5.0 through 2.5.2, 3.0.0 through 3.0.7, 3.1.0 through 3.1.5, 3.2.0 through 3.2.4, 4.0.0 through 4.0.3, 4.2.0 through 4.2.5, 4.4.0, 4.4.1 Description: The issue exists due to improper neutralization of input duri...

CVE-2023-36592

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36573

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36436 Windows MSHTML Platform Remote Code Execution Vulnerability

...

CVE-2023-36778 Microsoft Exchange Server Remote Code Execution Vulnerability

...

PT-2023-5613

Name of the Vulnerable Software and Affected Versions Exim affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of Exim. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The iss...

PT-2023-27952 · Phpkobo · Phpkobo Ajaxnewticker

Name of the Vulnerable Software and Affected Versions: phpkobo AjaxNewsTicker version 1.0.5 Description: An issue in phpkobo AjaxNewsTicker allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. Recommendations: For phpkobo AjaxNewsTicker version 1.0.5,...

PT-2023-7231 · Gimp +9 · Gimp +9

Name of the Vulnerable Software and Affected Versions: GIMP affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this issue, where the target must visit a malicious page...

PT-2023-31415 · WordPress · Allow Php In Posts/Pages

Name of the Vulnerable Software and Affected Versions: Allow PHP in Posts and Pages plugin for WordPress versions up to, and including, 3.0.4 Description: The issue allows authenticated attackers with subscriber-level permissions or above to execute code on the server via the php shortcode. This...

PT-2023-28714 · Unknown · Wpdatatables

Name of the Vulnerable Software and Affected Versions: wpDataTables versions prior to 2.1.66 Description: The issue concerns the deserialization of arbitrary data due to a lack of validation of the Serialized PHP array input data. This can potentially lead to remote code execution if a suitable...

PT-2023-26858 · Aruba · Arubaos-Switch

Name of the Vulnerable Software and Affected Versions: ArubaOS-Switch affected versions not specified Description: A memory corruption issue could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation results in the ability to execute...

CVE-2023-40828

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function...

PT-2023-8933

Name of the Vulnerable Software and Affected Versions Anyscale Ray versions 2.6.3 through 2.8.0 Description Anyscale Ray versions 2.6.3 and 2.8.0 contain a remote code execution issue due to insufficient validation of incoming requests through the job submission API. Attackers can exploit this to...

CVE-2020-21724

Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file...

CVE-2023-36866 Microsoft Office Visio Remote Code Execution Vulnerability

...

PT-2023-22359 · Pyrocms · Pyrocms

Name of the Vulnerable Software and Affected Versions: PyroCMS version 3.9 Description: The issue is a remote code execution flaw that can be exploited through a server-side template injection SSTI flaw, allowing a malicious attacker to send customized commands to the server and execute arbitrary...

PT-2023-5957 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 8.0. before 8.0.30 PHP versions 8.1. before 8.1.22 PHP versions 8.2. before 8.2.8 Description: The issue is caused by insufficient length checking when loading phar files, leading to a stack buffer overflow, which can result in...

PT-2023-24918 · Ezviz · Ezviz Cs-Cv310-A0-1C2Wfr Wifi Ip66 2.8Mm 1080P +7

Name of the Vulnerable Software and Affected Versions: EZVIZ CS-C6N-B0-1G2WF versions prior to V5.3.0 build 230215 EZVIZ CS-C6N-R101-1G2WF versions prior to V5.3.0 build 230215 EZVIZ CS-CV310-A0-1B2WFR versions prior to V5.3.0 build 230221 EZVIZ CS-CV310-A0-1C2WFR-C versions prior to V5.3.2 build...

PT-2023-26389 · Rigol · Rigol Mso5000

Name of the Vulnerable Software and Affected Versions: RIGOL MSO5000 digital oscilloscope version 00.01.03.00.03 Description: The issue allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the "webcontrol changepwd.cgi" application. This is a problem with the web...