CVE-2023-23377

3D Builder Remote Code Execution Vulnerability...

CVE-2023-23377

3D Builder Remote Code Execution Vulnerability...

CVE-2023-23377

3D Builder Remote Code Execution Vulnerability...

Remote code execution

3D Builder Remote Code Execution Vulnerability...

Remote code execution

3D Builder Remote Code Execution Vulnerability...

CVE-2023-23390 3D Builder Remote Code Execution Vulnerability

...

CVE-2023-23390

CVE-2023-23390 – Microsoft 3D Builder vulnerability confirmed by multiple sources. The PTsecurity write-up attributes the issue to insufficient input validation in the 3D Builder program, enabling remote code execution when processing a specially crafted file. Related notes from Kaspersky enumera...

CVE-2023-23390 3D Builder Remote Code Execution Vulnerability

...

CVE-2023-23377

CVE-2023-23377 corresponds to vulnerabilities in Microsoft 3D Builder. The connected sources identify a remote code execution issue affecting the 3D Builder app, described as a buffer-overflow style flaw during WRL file parsing, enabling arbitrary code execution. The evidence points to multiple a...

CVE-2023-23377 3D Builder Remote Code Execution Vulnerability

...

CVE-2023-23377 3D Builder Remote Code Execution Vulnerability

...

CVE-2023-22943

In Splunk Add-on Builder AoB versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs...

CVE-2023-22943

In Splunk Add-on Builder AoB versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs...

Design/Logic Flaw

In Splunk Add-on Builder AoB versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs...

CVE-2023-22943

CVE-2023-22943 affects Splunk Add-on Builder (AoB) < 4.1.2 and Splunk CloudConnect SDK

CVE-2023-22943 Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK

In Splunk Add-on Builder AoB versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs...

3D Builder Remote Code Execution Vulnerability

...

3D Builder Remote Code Execution Vulnerability

...

CVE-2023-0814

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to sensitive information disclosure via the usermeta shortcode in versions up to, and including 3.9.0. This is due to insufficient restriction on sensitive user meta values that can be called via that...

CVE-2023-0814

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to sensitive information disclosure via the usermeta shortcode in versions up to, and including 3.9.0. This is due to insufficient restriction on sensitive user meta values that can be called via that...