6749 matches found
CVE-2023-6151 Information Disclosure in Eskom E-municipality
Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users. This issue affects e-municipality module: before v.105...
CVE-2023-6150
The CVE-2023-6150 issue affects the Eskom Computer e-municipality module (versions prior to 105). The root cause is improper privilege management via the use of Privileged APIs, enabling collection of data provided by users and leading to potential information disclosure. Affected behavior is tha...
PT-2023-32546
Name of the Vulnerable Software and Affected Versions e-municipality module version prior to 105 Description The issue allows an attacker to collect data as provided by users due to the incorrect use of privileged APIs. Recommendations For versions prior to 105, update to version 105 or later to...
oostwegelcollection.nl Cross Site Scripting vulnerability OBB-3796581
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Fedora 37 : chromium (2023-442c049c3c)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-442c049c3c advisory. update to 119.0.6045.159, upstream security release - High CVE-2023-5997, use after free in Garbage Collection - High CVE-2023-6112, use after free ...
SUSE SLES15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2023:4533-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4533-1 advisory. - Firefox Extended Support Release 115.5.0 ESR Placeholder changelog-entry bsc1217230 Fixed: Various security fixes and other quali...
CVE-2023-47529
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates & Patterns collection.This issue affects Cloud Templates & Patterns collection: from n/a through 1.2.2...
ruby:fuzz_ruby_gems: Heap-buffer-overflow in gc_mark_ptr
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4506880667680768 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60b000009ed0 Cras...
WordPress Plugin ThemeIsle Cloud Templates & Patterns collection Information Disclosure Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress Plugin ThemeIsle...
electron{25,26} -- use after free in Garbage Collection
Electron developers report: This update fixes the following vulnerability: Security: backported fix for CVE-2023-5997...
frenchartcollection.com Cross Site Scripting vulnerability OBB-3788912
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0372-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0372-1 advisory. - Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption...
Atlassian Jira Service Management Data Center and Server 4.20.x < 4.20.27 / 5.4.x < 5.4.11 (JSDSERVER-14755)
The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-14755 advisory. - A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite version...
Chromium: CVE-2023-5997 Use after free in Garbage Collection
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Amazon Linux 2 : firefox (ALASFIREFOX-2023-017)
The version of firefox installed on the remote host is prior to 115.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2023-017 advisory. A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportu...
Microsoft Edge (Chromium) < 118.0.2088.109 / 119.0.2151.72 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.109 / 119.0.2151.72. It is, therefore, affected by multiple vulnerabilities as referenced in the November 16, 2023 advisory. - Microsoft Edge Chromium-based Remote Code Execution Vulnerability CVE-2023-36008...
CVE-2023-5997
Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2023-5997
Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-5997
Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-5997
Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...