UBUNTU-CVE-2023-22025

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition:...

NetApp ONTAP Security Vulnerability

NetApp ONTAP is a proprietary operating system from Network Appliance NetApp, Inc. It is used for storage disk arrays. A security vulnerability exists in NetApp ONTAP versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2, and 9.13.1, which originates from a vulnerability that could...

PT-2023-6048 · Siemens · Simcenter Amesim

Name of the Vulnerable Software and Affected Versions: Simcenter Amesim versions prior to V2021.1 Description: The issue is related to incorrect code generation management in the Simcenter Amesim platform, which can be exploited by a remote attacker to execute arbitrary code. The affected...

The vulnerability of the SetTriggerPPPoEValidate() function in D-Link DIR-X3260 Wi-Fi routers’ software allows a hacker to bypass security restrictions and execute arbitrary code.

The vulnerability of the SetTriggerPPPoEValidate function in D-Link DIR-X3260 Wi-Fi routers is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and execute arbitrary code by sending specially crafted HNAP...

PT-2023-6103 · D Link · D-Link Dap-1325

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. The flaw exists within the handling of XML data provided...

PT-2023-5696 · D Link · D-Link Dap-1325

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. The flaw exists within the handling of XML data provided...

Privilege escalation

The web service of ByDemes Group Airspace CCTV Web Service in its 2.616.BY00.11 version, contains a privilege escalation vulnerability, detected in the Camera Control Panel, whose exploitation could allow a low-privileged attacker to gain administrator access...

CVE-2023-0506

CVE-2023-0506 affects ByDemes Group Airspace CCTV Web Service version 2.616.BY00.11, with a privilege escalation in the Camera Control Panel. A low-privilege attacker could gain administrator access, per the NVD/NVD-derived description. The connected documents provide the vulnerable component and...

CVE-2023-0506 ByDemes Group Airspace CCTV Web Service Improper Access Control

The web service of ByDemes Group Airspace CCTV Web Service in its 2.616.BY00.11 version, contains a privilege escalation vulnerability, detected in the Camera Control Panel, whose exploitation could allow a low-privileged attacker to gain administrator access...

CVE-2023-0506 ByDemes Group Airspace CCTV Web Service Improper Access Control

The web service of ByDemes Group Airspace CCTV Web Service in its 2.616.BY00.11 version, contains a privilege escalation vulnerability, detected in the Camera Control Panel, whose exploitation could allow a low-privileged attacker to gain administrator access...

CVE-2023-40049

In WSFTP Server version prior to 8.8.2, an unauthenticated user could enumerate files under the 'WebServiceHost' directory listing...

Progress Software WS_FTP Server Security Vulnerability

Progress Software WSFTP Server is an effective and highly manageable FTP server from Progress Software, USA. A security vulnerability exists in Progress Software WSFTP Server versions prior to 8.8.2. An attacker can use this vulnerability to enumerate files in the "WebServiceHost" directory listi...

CVE-2023-38344

An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an...

CVE-2023-31012

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure...

PT-2023-26668 · Unknown · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP CRM versions 17.0.1 and earlier Description: The issue allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module. This is related to analyseVarsForSqlAndScriptsInjection and...

SolarWinds Platform Security Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform that originates from allowing a user with administrative privileges to the SolarWinds Web console to execute arbitrar...

SolarWinds Platform Security Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform that originates from allowing a user with administrative privileges to the SolarWinds Web console to execute arbitrar...

PT-2023-29061 · Mcafee · Skyhigh Secure Web Gateway

Name of the Vulnerable Software and Affected Versions: Skyhigh Secure Web Gateway SWG versions 11.x prior to 11.2.14 Skyhigh Secure Web Gateway SWG versions 10.x prior to 10.2.25 Skyhigh Secure Web Gateway SWG versions 12.x prior to 12.2.1 Description: A password management issue in Skyhigh Secur...

Xiongmai NBD80S09S-KLC and NBD80N32RA-KL-V3 Security Vulnerabilities

The Xiongmai NBD80S09S-KLC and Xiongmai NBD80N32RA-KL-V3 are both a web service firmware from Xiongmai Technology Xiongmai, China. A security vulnerability exists in the Xiongmai NBD80S09S-KLC and NBD80N32RA-KL-V3, which stems from the presence of a buffer overflow vulnerability. Affected product...

PT-2023-26855

Name of the Vulnerable Software and Affected Versions Apache Superset versions up to and including 2.1.0 Description The issue is related to stack traces for errors being enabled by default, resulting in the exposure of internal traces on REST API endpoints to users. This could potentially reveal...