13608 matches found
Heap-based Buffer Overflow
Overview CefSharp.Common is a the CefSharp Chromium-based browser component 'Core' and common 'Element' components, needed by both WPF and WinForms. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in vp8 encoding in libvpx. Remediation Upgrade CefSharp.Common to...
Security Bulletin: Due to use of Apache Pulsar, IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is vulnerable to a security restrictions bypass.
Summary Pulsar is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library. CVE-2023-30428, CVE-2023-30429, CVE-2023-37579 and CVE-2023-31007 The below vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-30428 DESCRIPTION: Apache Pulsar could allow a...
CVE-2023-44047
creationtimestamp| type| source ---|---|--- 2023-09-28 00:42:00+00:00| seen| https://t.me/cibsecurity/71160...
PT-2023-28594 · Unknown · Common Voice
Name of the Vulnerable Software and Affected Versions: Common Voice version 1.88.2 Description: The issue is related to reflected Cross-Site Scripting XSS in the context of Common Voice’s server origin, given that user-controlled data flows to a path expression. This may lead to reflected...
CVE-2023-35813
creationtimestamp| type| source ---|---|--- 2023-09-26 15:23:42+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/7811 2023-12-31 05:27:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6343 2024-01-01 05:39:46+00:00| seen| https://t.me/arpsyndicate/2298 2024-01-01...
fido-device-onboard bug fix and enhancement update
An update is available for fido-device-onboard. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fido-device-onboard package provides a rust implementation of...
dmidecode security update
An update is available for dmidecode. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dmidecode packages provide utilities for extracting Intel 64 and Intel...
CVE-2023-38907
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to replay old messages encrypted with a still valid session key...
Security Bulletin: IBM Events Operator is affected by an openssl vulnerability
Summary Openssl is used by IBM Events Operator as part of the Operating System CVE-2022-4304. This is a library that provides secure communication. Vulnerability Details CVEID:CVE-2022-4304 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a timing-base...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-41991 Apple Multiple Products Improper Certificate Validation Vulnerability CVE-2023-41992 Apple Multiple Products Kernel Privilege Escalation Vulnerability...
CVE-2022-9648
creationtimestamp| type| source ---|---|--- 2023-09-23 00:28:36+00:00| seen| Telegram/yK-Um5pIgelPVQQzco5rC215RhA6M6d9eM9-8X6BajCtaNp...
CVE-2022-4039
creationtimestamp| type| source ---|---|--- 2023-09-22 18:31:51+00:00| seen| https://t.me/cibsecurity/70948...
ROS-20230922-01
Vulnerability in the StringSubstitutor component of the Apache Common Text library is related to mismanagement of code generation. code generation. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
CVE-2023-42280
mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading...
Security Bulletin: IBM Events Operator is affected by a denial of service in OpenSSL (CVE-2022-4450).
Summary OpenSSL is used by IBM Events Operator as part of the Operating System CVE-2022-4450. Vulnerability Details CVEID:CVE-2022-4450 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error related to the improper handling of specific PEM data by the PEMreadbioe...
Security Bulletin: IBM Events Operator is affected by a denial of service in OpenSSL (CVE-2023-0215).
Summary OpenSSL is used by IBM Events Operator as part of its Operating System CVE-2023-0215. Vulnerability Details CVEID:CVE-2023-0215 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a use-after-free error related to the incorrect handling of streaming ASN.1 data by the...
CVE-2023-20594
creationtimestamp| type| source ---|---|--- 2023-09-20 22:29:33+00:00| seen| https://t.me/cibsecurity/70826 2025-06-27 21:55:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19793...
UBUNTU-CVE-2023-4504
Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023...
OpenPrinting CUPS Buffer Error Vulnerability
OpenPrinting CUPS is a standards-based, open source printing system for Linux® and other Unix®-like operating systems from OpenPrinting, Inc. A security vulnerability exists in OpenPrinting CUPS that stems from an inability to verify the length of a CUPS document produced by an attacker, resultin...