CVE-2023-28460

A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected appliance as an administrator, resulting in arbitrary shell code execution. This is fixed in 8.6.1.262 or newer and 10.4.2.93 or newer...

CVE-2023-28460

A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected appliance as an administrator, resulting in arbitrary shell code execution. This is fixed in 8.6.1.262 or newer and 10.4.2.93 or newer...

Array Networks ArrayOS AG Authorization Issue Vulnerability

Array Networks ArrayOS AG is an SSL-VPN product from Array Networks that enables secure remote access regardless of user, device or location. It provides scalable and controllable remote and mobile access to corporate networks, enterprise applications and cloud services for any user, any device,...

PT-2023-21733 · Array Networks · Array Networks Apv

Name of the Vulnerable Software and Affected Versions: Array Networks APV products versions prior to 8.6.1.262 Array Networks APV products versions prior to 10.4.2.93 Description: A command injection issue was discovered in Array Networks APV products. A remote attacker can send a crafted packet...

CVE-2023-28461

Array Networks Array AG Series and vxAG 9.4.0.481 and earlier allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could then be exploited through a vulnerable URL. The 2023-03-09...

CVE-2023-28461

CVE-2023-28461 affects Array Networks ArrayOS Array AG Series and vxAG (≤ 9.4.0.481). The vulnerability allows unauthenticated remote code execution by exploiting a flag in an HTTP header to browse the device filesystem and reach a vulnerable URL. PTSecurity notes evidence of active exploitation;...

PT-2023-21734

Name of the Vulnerable Software and Affected Versions Array Networks Array AG Series and vxAG versions 9.4.0.481 and earlier Description A critical security flaw allows remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header...

Array Networks APV products command injection vulnerabilities

Array Networks APV products are a family of array load balancing and application delivery products from Array Networks, Inc. provides the availability, scalability, performance, security, and control necessary to keep applications running in their power band. A security vulnerability exists in...

CVE-2023-28460: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected appliance as an administrator, resulting in arbitrary shell code execution. This is fixed in 8.6.1.262 or newer and 10.4.2.93 or newer...

PT-2023-1685 · Schneider Electric · Powerlogic Hdpm6000

Name of the Vulnerable Software and Affected Versions: PowerLogic HDPM6000 affected versions not specified Description: A CWE-129: Improper validation of an array index issue exists where a specially crafted Ethernet request could result in denial of service or remote code execution...

PT-2023-36744

Уязвимость функции gen11 compute sseu info модуля drivers/gpu/drm/i915/gt/intel sseu.c ядра операционной системы Linux связана с непроверенным индексированием массива. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации или вызвать отказ в обслуживании...

PT-2025-18876

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the max subslices array-index-out-of-bounds access Description A potential out-of-bounds access issue has been identified in the Linux kernel, specifically in the drm/i915/sseu...

OSV-2023-165 Heap-buffer-overflow in array_container_to_uint32_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56893 Crash type: Heap-buffer-overflow WRITE 4 Crash state: arraycontainertouint32array ratouint32array roaringbitmapserialize...

PT-2023-35693 · Git +1 · Croaring

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves several functions: array container to uint32 array, ra to...

CVE-2022-40539

Memory corruption in Automotive Android OS due to improper validation of array index...

CVE-2022-33256

Memory corruption due to improper validation of array index in Multi-mode call processor...

Memory corruption

Memory corruption in Automotive Android OS due to improper validation of array index...

Memory corruption

Memory corruption due to improper validation of array index in Multi-mode call processor...

php: Fix of 3 CVEs

CVE-2023-0567: crypt: Fix validation of malformed BCrypt hashes - CVE-2023-0568: Fix array overrun when appending slash to paths - CVE-2023-0662: Fix DoS vulnerability when parsing multipart request body...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-1516)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...