10042 matches found
PT-2023-27476 · Lg · Lg Simple Editor
Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this issue. The specif...
PT-2023-27485 · Lg · Lg Simple Editor
Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this issue. The specif...
Security Advisory 0089
Security Advisory 0089 . CSAF PDF Date: August 23, 2023 Revision | Date | Changes ---|---|--- 1.0 | August 23, 2023 | Initial release The CVE-ID tracking this issue: CVE-2023-24548 CVSSv3.1 Base Score: 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Common Weakness Enumeration: CWE-120 Buffer Co...
AZL-44271 CVE-2020-18768 affecting package openjpeg2 2.3.1-12
There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file...
PT-2023-4539 · Unknown +1 · Postgresql +1
Name of the Vulnerable Software and Affected Versions: PostgreSQL version 12.2 Description: The issue is related to a buffer copy without checking the size of the input data in the signal handler for SIGHUP signals in PostgreSQL. This could potentially allow a remote attacker to cause a denial of...
The vulnerability in the yank_copy_line function of the register.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the yankcopyline function in the register.c component of the Vim text editor is related to incorrect calculation of buffer size. Exploiting this vulnerability may allow an attacker to access confidential data, compromise its integrity, and even cause service interruptions...
CVE-2023-2971 Typora Local File Disclosure
Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text fro...
CVE-2023-40337
A flaw was found in the Jenkins Folders plugin. Affected versions of this plugin allow attackers to copy a view inside a folder...
CVE-2023-40336
A cross-site request forgery CSRF vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy folders...
CVE-2023-40336
A cross-site request forgery CSRF vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy folders...
CVE-2023-40337
A cross-site request forgery CSRF vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder...
CVE-2023-40337
A cross-site request forgery CSRF vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder...
CVE-2023-40336
A cross-site request forgery CSRF vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy folders...
CVE-2023-40336
A cross-site request forgery CSRF vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy folders...
CVE-2023-39975
kdc/dotgsreq.c in MIT Kerberos 5 aka krb5 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another...
CLSA-2023-1692110840 Fix CVE(s): CVE-2018-7409
SECURITY UPDATE: Fix buffer overflow - debian/patch/CVE-2018-7409: fix unicodetoansicopy, don't include NUL-terminator in length in unicodetoansialloc, make sure that the error handling doesn't overrun the buffer - CVE-2018-7409...
UBUNTU-CVE-2023-40303
GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary us...
GNU Inetutils 安全漏洞
GNU Inetutils is a collection of network tools from the GNU Project that contains common network management programs such as traceroute, hostname, ifconfig, and others. The toolset is mainly used for functions such as network diagnostics, configuration and system information query. An elevation o...
The vulnerability of the copy function for essential data provided by the supplier to business partners of the SAP Supplier Relationship Management application allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the copy function for the supplier’s main data for application partners of SAP Supplier Relationship Management relates to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access...