CVE-2023-35296: Out-of-bounds Read

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability...

CVE-2023-32085: Buffer Over-read

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability...

CVE-2023-35324: Buffer Over-read

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability...

CVE-2023-32040: Untrusted Pointer Dereference

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability...

CVE-2023-32039: Out-of-bounds Read

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability...

PT-2023-25470

Name of the Vulnerable Software and Affected Versions SourceCodester Best POS Management System version 1.0 Description A critical issue affects the Login Page component, specifically the file admin class.php. The manipulation of the username argument leads to SQL injection. This issue can be...

PT-2023-3533 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the USB Audio Class System Driver of Windows operating systems. This allows a remote attacker to execute arbitrary code on the syste...

PT-2023-3851 · Microsoft · Pcl6 Class Printer Driver +2

Name of the Vulnerable Software and Affected Versions: Windows PostScript Printer Driver Pscript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to information disclosure. It may allow an attacker to gain unauthorized access to protected information...

PT-2023-3833 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to an information disclosure vulnerability. It may allow an attacker to gain unauthorized access to protected information...

PT-2023-3827 · Microsoft · Windows Postscript Printer Driver +2

Name of the Vulnerable Software and Affected Versions: Windows PostScript Printer Driver Pscript and PCL6 Class Printer affected versions not specified Description: The issue is related to insufficient protection of system data in Windows operating systems, specifically affecting PostScript Print...

PT-2023-3824 · Microsoft · Windows Postscript Printer Driver +2

Name of the Vulnerable Software and Affected Versions: Windows PostScript Printer Driver Pscript and PCL6 Class Printer affected versions not specified Description: The issue is related to insufficient input validation in the PostScript Printer Driver Pscript and PCL6 Class Printer of Windows...

Microsoft USB Audio Class System Driver security vulnerabilities

Microsoft USB Audio Class System Driver is an AVStream microdriver from Microsoft Corporation USA. A security vulnerability exists in Microsoft USB Audio Class System Driver. An attacker could exploit this vulnerability to remotely execute code. The following products and versions are affected:...

The Best POS Management System Has a SQL Injection Vulnerability

Best pos management system is a best pos management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Best POS Management System version 1.0, which stems from the parameter username in the file adminclass.php that can lead to sql injection...

CVE-2023-3599

A vulnerability was found in SourceCodester Best Fee Management System 1.0. It has been rated as critical. Affected by this issue is the function saveuser of the file adminclass.php of the component Add User Handler. The manipulation leads to improper access controls. The attack may be launched...

CVE-2023-27868

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked class instantiation when providing plugin classes. By sending a specially crafted request using the named...

Vulnerabilities in permissions and access control mechanisms of the Best Fee Management System

Best Fee Management System is a fee management system by Mayuri K. Individual developer. Best Fee Management System version 1.0 has a permissions licensing and access control issue vulnerability that stems from the saveuser function in the adminclass.php file that results in incorrect access...

PT-2023-25406 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Fee Management System version 1.0 Description: A critical issue has been found, affecting the function save user of the file admin class.php in the component Add User Handler. This leads to improper access controls, allowi...

CVE-2023-27868: Improper Control of Generation of Code

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked class instantiation when providing plugin classes. By sending a specially crafted request using the named...

CVE-2023-25097

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

Security Bulletin: IBM Match 360 is vulnerable to SnakeYaml's Constructor() class that not restrict types which can be instantiated during deserialization (CVE-2022-1471)

Summary SnakeYaml's Constructor class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict...