CVE-2023-2013

An issue has been discovered in GitLab CE/EE affecting all versions starting from 1.2 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. An issue was found that allows someone to abuse a discrepancy between the Web application display a...

PT-2023-3112 · Cisco · Cisco Telepresence Video Communication Server +1

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series versions affected versions not specified Cisco TelePresence Video Communication Server VCS versions affected versions not specified Description: The issue is related to insufficient role-based access control in the CLI...

CVE-2023-2013

CVE-2023-2013 affects GitLab CE/EE with versions starting from 1.2 up to 15.10.8, versions from 15.11 up to 15.11.7, and 16.0 up to 16.0.2. The issue arises from a discrepancy between the web application display and the Git CLI, which can be abused to social engineer victims into cloning non-trus...

CVE-2023-2013: Improper Restriction of Rendered UI Layers or Frames

An issue has been discovered in GitLab CE/EE affecting all versions starting from 1.2 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. An issue was found that allows someone to abuse a discrepancy between the Web application display a...

CVE-2023-2013

An issue has been discovered in GitLab CE/EE affecting all versions starting from 1.2 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. An issue was found that allows someone to abuse a discrepancy between the Web application display a...

Cisco TelePresence Collaboration Endpoint CLI Access Control Rerecord Files

The vulnerability of the command-line interface CLI of microprogramming software for Cisco TelePresence Collaboration Endpoint devices and Cisco RoomOS operating systems is related to access control deficiencies. Exploiting this vulnerability could allow a attacker to re-record arbitrary files...

AdvanceCOMP security vulnerabilities

AdvanceCOMP is a cross-platform command line tool for data compression. The product is capable of optimizing compressed files and reducing compressed file size. A security vulnerability exists in AdvanceCOMP that stems from a segmentation error flaw resulting in reduced usability...

curl: HSTS ignored on multiple requests

A flaw was found in the Curl package, where the HSTS mechanism would be ignored by subsequent transfers when done on the same command line because the state would not be properly carried. This issue may result in limited confidentiality and integrity...

curl: HSTS ignored on multiple requests

A flaw was found in the Curl package, where the HSTS mechanism would be ignored by subsequent transfers when done on the same command line because the state would not be properly carried. This issue may result in limited confidentiality and integrity...

[SECURITY] Fedora 38 Update: ImageMagick-7.1.1.11-1.fc38

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

CVE-2023-3000

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass. This issue affects ErMon: before 230602...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass.This issue affects ErMon: before 230602...

CVE-2023-3000

CVE-2023-3000 affects Erikoglu Technology ErMon prior to 230602 due to improper neutralization of special elements in SQL commands, causing a SQL Injection with potential command‑line execution and authentication bypass. Affected component: ErMon (pre‑230602). Reported CVSSv3.1: 9.8 (Network, Low...

CVE-2023-3000 SQLi in Erikoglu Technology's ErMon

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass. This issue affects ErMon: before 230602...

Silicon Labs Gecko SDK security vulnerabilities

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK v4.2.1 and prior versions, which stems from a...

CVE-2023-3000: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass. This issue affects ErMon: before 230602...

PT-2023-22511

Name of the Vulnerable Software and Affected Versions Erikoglu Technology ErMon versions prior to 230602 Description The issue is related to an SQL Injection vulnerability, allowing for Command Line Execution and Authentication Bypass. This is due to the improper neutralization of special element...

Cisco Email Security Appliance Command Injection

The vulnerability of the command-line interface CLI of the Cisco Email Security Appliance relates to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

Cisco NX-OS CLI Code Execution

The vulnerability of the command-line interface CLI of Cisco NX-OS and Cisco FXOS router operating systems from Cisco UCS Fabric Interconnect is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges on the...

Aruba EdgeConnect Enterprise Command Injection

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute...