13606 matches found
CVE-2023-46981
SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /common/log/list...
Sql injection
SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /common/log/list...
Novel-Plus Security Vulnerability
Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. A security vulnerability exists in Novel-Plus version v.4.2.0. An attacker can exploit the vulnerability by executing arbitrary code via a specially crafted script on the sort parameter in /common/log/list...
Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-403)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-403 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960. CVE-2023-5441 Use After Free in GitHub repository vim/vim prior to v9.0.2010...
PT-2023-30282 · Unknown · Novel-Plus
Name of the Vulnerable Software and Affected Versions: Novel-Plus version 4.2.0 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in the "/common/log/list" API endpoint. Recommendations: For Novel-Plus version 4.2.0,...
CVE-2023-5846
creationtimestamp| type| source ---|---|--- 2023-11-02 19:27:47+00:00| seen| https://t.me/cibsecurity/73463...
DEBIAN-CVE-2023-3164
A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file...
DEBIAN-CVE-2023-1193
A use-after-free flaw was found in setupasyncwork in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work...
AZL-31853 CVE-2023-1192 affecting package kernel for versions less than 5.15.137.1-1
A use-after-free flaw was found in smb2isstatusiotimeout in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region,...
UBUNTU-CVE-2023-1192
A use-after-free flaw was found in smb2isstatusiotimeout in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region,...
The vulnerability of the SAP CommonCryptoLib library, related to pointer dereferencing errors, allows a perpetrator to trigger a service failure.
The vulnerability of the SAP CommonCryptoLib library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
Moderate: Red Hat Security Advisory: samba security update
An update for samba is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
SUSE CVE-2023-24936
unknown...
SUSE CVE-2023-33128
unknown...
CVE-2023-45780
creationtimestamp| type| source ---|---|--- 2023-10-30 21:19:58+00:00| seen| https://t.me/cibsecurity/73178...
CVE-2023-5836
creationtimestamp| type| source ---|---|--- 2023-10-29 02:18:09+00:00| seen| https://t.me/cibsecurity/73110...
The vulnerability of the data collection module of the Dell Common Event Enabler, specifically the Dell OpenManage Client Instrumentation (OMCI) tool, is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges.
The vulnerability of the data collection module of the Dell Common Event Enabler, implemented through the Dell OpenManage Client Instrumentation OMCI, is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2018-17878
creationtimestamp| type| source ---|---|--- 2023-10-27 02:16:14+00:00| seen| https://t.me/cibsecurity/73027...
The vulnerability of the Events & Notifications sub-component of the PeopleSoft Enterprise CC Common Application Objects component of the Oracle PeopleSoft Products allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Events & Notifications sub-component of the PeopleSoft Enterprise CC Common Application Objects component in the Oracle PeopleSoft Products suite of business applications is related to insufficient validation of input data. Exploiting this vulnerability may allow an...