Vulnerabilities fixed in Adobe After Effects

Adobe has fixed vulnerabilities in After Effects. A malicious party could exploit the vulnerabilities to gain access to system data, or to execute arbitrary code with privileges of the victim. Successful exploitation requires the malicious party to trick the victim into opening a rogue file. Adob...

PT-2023-9498 · Unknown · Laquis Scada

Name of the Vulnerable Software and Affected Versions: LAquis SCADA affected versions not specified Description: The issue is related to the LAquis SCADA system, where an attacker can access locations outside of their own directory. This is due to incorrect restriction of the path name to a...

CVE-2023-41366

Under certain condition SAP NetWeaver Application Server ABAP - versions KERNEL 722, KERNEL 7.53, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.91, KERNEL 7.92, KERNEL 7.93, KERNEL 7.94, KERNEL64UC 7.22, KERNEL64UC 7.22EXT, KERNEL64UC 7.53, KERNEL64NUC 7.22, KERNEL64NUC 7.22EXT,...

CVE-2023-41366

CVE-2023-41366 affects SAP NetWeaver Application Server ABAP and ABAP Platform. Affected components/versions: KERNEL 722, KERNEL 7.53, 7.77, 7.85, 7.89, 7.54, 7.91, 7.92, 7.93, 7.94 and KERNEL64UC 7.22/7.22EXT, KERNEL64NUC 7.22/7.22EXT, KERNEL64UC 7.53. The issue arises from a lack of restriction...

Vulnerabilities fixed in TYPO3 Core

Vulnerabilities have been fixed in TYPO3 Core. A malicious person could exploit the vulnerabilities to circumvent a security measure circumvention, gain access to system data, or launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the context of the...

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in Business One and Netweaver. A malicious party can exploit the vulnerabilities to circumvent a bypass a security measure, or gain access via brute-force gain access to sensitive data. SAP has released updates to fix the vulnerabilities in the vulnerable products. F...

The vulnerability of the XTestSwapFakeInput function in the X Window System X.Org Server, and the Wayland protocol for X.Org XWayland, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XTestSwapFakeInput function in the X Window System X.Org Server, and the Wayland protocol for X.Org XWayland, is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity,...

The vulnerability in the str2host.c component of the DNS library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the str2host.c component in the DNS library involves a repeated memory release mechanism. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the _bfd_vms_slurp_eeom function in the libbfd.c component of the GNU Binutils development environment allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the bfdvmsslurpeeom function in the libbfd.c component of the GNU Binutils development environment is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...

The vulnerability in web browsers Firefox and Firefox ESR, related to writing beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in Firefox and Firefox ESR web browsers is related to writing beyond the buffer limit. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the ProcXIPassiveUngrabDevice function in the Wayland protocol for X.Org XWayland, which is part of the X.Org Server for the X Window System, allows a intruder to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ProcXIPassiveUngrabDevice function in the Wayland protocol for X.Org XWayland, implemented by the X.Org Server, is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft has fixed vulnerabilities in several Dynamics products. A malicious party could exploit the vulnerabilities to impersonate another user and thus potentially gain access gain access to sensitive data. Microsoft Dynamics 365 Sales:...

WordPress Contact Form To Any API 1.1.2 SQL Injection Vulnerability

WordPress Contact Form to Any API plugin version 1.1.2 suffers from a remote SQL injection vulnerability. Exploit Title: WP Plugins Contact Form to Any API = 1.1.2 - SQL Injection Exploit Author: Arvandy Software Link: https://wordpress.org/plugins/contact-form-to-any-api/ Vendor Homepage:...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in components of Azure. A malicious party could exploit the vulnerabilities to circumvent a security measure, execute arbitrary code with the victim's privileges or gain access to sensitive data. Azure:...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution User rights Spoofing Accessing...

The vulnerability of the GNU Binutils development tool lies in the fact that operations beyond the buffer boundaries in memory can be performed. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GNU Binutils development tooling relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Zstandard data compression library, related to the default access rights settings, allows attackers to gain access to confidential data.

The vulnerability of the Zstandard data compression library is related to the default access rights settings. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the processCanonCameraInfo function in the LibRaw image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the processCanonCameraInfo function in the LibRaw image processing library is related to the output of operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity,...

The vulnerabilities of the input/output modules in the Rsyslog software utility for logging processing allow a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the input/output modules of the Rsyslog log processing software is related to insufficient handling of the format string. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Vulnerabilities fixed in Ivanti Secure Access Client

Ivanti has fixed vulnerabilities in Secure Access Client formerly Pulse Secure Desktop Client. A local malicious person could exploit the vulnerabilities to grant himself elevated privileges granted and thus execute code with potentially system privileges and/or gain access to sensitive data...