2852 matches found
Ghost Foundation node-sqlite3 code execution vulnerability
Talos Vulnerability Report TALOS-2022-1645 Ghost Foundation node-sqlite3 code execution vulnerability March 16, 2023 CVE Number CVE-2022-43441 SUMMARY A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascri...
Microsoft Excel Code Execution Vulnerability (CNVD-2023-53911)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...
CVE-2023-23403 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
...
CVE-2023-27399
A vulnerability has been identified in Tecnomatix Plant Simulation All versions V2201.0006. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the...
KB5023706: Windows 11 version 22H2 Security Update (March 2023)
The remote Windows host is missing security update 5023706. It is, therefore, affected by multiple vulnerabilities - An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An...
NETGEAR Nighthawk WiFi6 Router Code Execution Vulnerability
The NETGEAR Nighthawk WiFi6 Router is a series of wireless routers from NETGEAR. The NETGEAR Nighthawk WiFi6 Router suffers from a code execution vulnerability that stems from the fact that the device contains a file sharing mechanism that can be exploited by an attacker to execute arbitrary code...
CVE-2023-26076
creationtimestamp| type| source ---|---|--- 2023-03-13 17:23:33+00:00| seen| https://t.me/cibsecurity/59905 2023-03-16 18:07:00+00:00| seen| https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html 2023-03-20 14:22:52+00:00| published-proof-of-concept|...
CVE-2023-24033
creationtimestamp| type| source ---|---|--- 2023-03-13 15:53:22+00:00| seen| https://t.me/cibsecurity/59888 2023-03-16 18:07:00+00:00| seen| https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html 2023-03-17 15:00:08+00:00| seen| https://t.me/truesecator/4181...
PT-2023-21224 · Github · Github-Slug-Action
Name of the Vulnerable Software and Affected Versions: github-slug-action versions 4.0.0 through 4.4.1 Description: The github-slug-action uses the github.head ref parameter in an insecure way, allowing any user on GitHub to trigger the vulnerability by creating a pull request with a branch name...
CVE-2021-33352
An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the ticket message field...
Security Bulletin: IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to remote code execution vulnerability (CVE-2023-23477)
Summary IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to remote code execution vulnerability CVE-2023-23477. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a securi...
CVE-2021-33391
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
CVE-2023-21529
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2023-21718 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
...
CVE-2023-24994
A vulnerability has been identified in Tecnomatix Plant Simulation All versions V2201.0006. The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the...
CVE-2023-24978
A vulnerability has been identified in Tecnomatix Plant Simulation All versions V2201.0006. The affected application is vulnerable to uninitialized pointer access while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current...
Description of the security update for SharePoint Enterprise Server 2016 Language Pack: February 14, 2023 (KB5002325)
None None...
End of support for Office 2016 and Office 2019
None None...