SUSE CVE-2018-9259

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was addressed in epan/dissectors/file-mp4.c by restricting the box recursion depth...

SUSE CVE-2018-18346

Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page...

SUSE CVE-2019-19048

A memory leak in the cryptoreportstat function in drivers/virt/vboxguest/vboxguestutils.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service memory consumption by triggering copyformuser failures, aka CID-e0b0cb938864...

SUSE CVE-2020-19499

An issue was discovered in heif::Boxiref::getreferences in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read...

SUSE CVE-2021-3467

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened...

SUSE CVE-2022-38725

An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected...

CVE-2023-21703

Azure Data Box Gateway Remote Code Execution Vulnerability...

CVE-2023-21703

Azure Data Box Gateway Remote Code Execution Vulnerability...

Remote code execution

Azure Data Box Gateway Remote Code Execution Vulnerability...

CVE-2023-21703 Azure Data Box Gateway Remote Code Execution Vulnerability

...

CVE-2023-21703 Azure Data Box Gateway Remote Code Execution Vulnerability

...

CVE-2023-21703

CVE-2023-21703 affects Azure Data Box Gateway. The connected documents describe a Remote Code Execution vulnerability caused by insufficient access restrictions in Azure Data Box Gateway, enabling an attacker to execute arbitrary code remotely. The issue is tracked across multiple sources, with M...

Azure Data Box Gateway Remote Code Execution Vulnerability

...

CVE-2023-21703: Deserialization of Untrusted Data

Azure Data Box Gateway Remote Code Execution Vulnerability...

Microsoft Azure Data Box Gateway 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure Data Box Gateway. The following products and versions are affected: Azure Data Box Gateway, Azure Stack Edge...

PT-2023-1426 · Microsoft · Azure Data Box Gateway

Name of the Vulnerable Software and Affected Versions: Azure Data Box Gateway affected versions not specified Description: The issue is related to insufficient access restrictions in Azure Data Box Gateway, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: At...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several components of Azure. For an overview of the vulnerabilities, see the following list. Azure App Service: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...

PT-2023-16063

Name of the Vulnerable Software and Affected Versions Social Like Box and Page by WpDevArt WordPress plugin versions prior to 0.8.41 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the plugin's failure to validate and...

CVE-2023-25160: Authorization Bypass Through User-Controlled Key

Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can access the mail box by ID getting the subjects and the first characters of the emails. Users should upgrade to Mail 2.2.1 for Nextcloud 25, Mail 1.14.5 for...

CVE-2023-0177: Undefined Security Weakness

The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...