The vulnerability of Adobe Acrobat Reader PDF viewer and editor programs relates to the occurrence of out-of-buffer operations in memory, which allows attackers to disclose protected information.

The vulnerability of Adobe Acrobat Reade PDF viewer and editor programs relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

Acronis Agent 安全漏洞

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent that stems from the disclosure of sensitive information due to unauthorized...

DEBIAN-CVE-2023-41039

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox suffers from an input validation error vulnerability, which originates on Windows, where an integer overflow may occur, which RecordedSourceSurfaceCreation leads to a heap buffer overflow, which may disclos...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox that originates from unencrypted push notifications stored on disk in private browsing mode, which could lead to the disclosure of sensitive informati...

UBUNTU-CVE-2023-40890

A stack-based buffer overflow vulnerability exists in the lookupsequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to ...

DEBIAN-CVE-2023-40828

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function...

PT-2023-9204 · Unknown +7 · Frrouting Frr +7

Name of the Vulnerable Software and Affected Versions: FRRouting FRR through 9.0 Description: An issue was discovered in FRRouting FRR, where the file bgpd/bgp packet.c can read the initial byte of the ORF header in an ahead-of-stream situation. This may allow a remote attacker to disclose...

OESA-2023-1548 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable...

CVE-2023-34723

An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19T53, allows attackers to gain sensitive information via /config/system.conf...

CVE-2023-4229

A vulnerability has been identified in ioLogik 4000 Series ioLogik E4200 firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized dat...

SICK LMS5xx 安全漏洞

The SICK LMS5xx is a series of sensors from SICK, Germany. A security vulnerability exists in the SICK LMS5xx that stems from a lack of encryption of the communication channel, which could lead to unauthorized disclosure of sensitive information...

PT-2023-27490 · Lg · Lg Simple Editor

Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this issue, the...

MOXA ioLogik 4000 Series 安全漏洞

MOXA ioLogik 4000 Series is a series of general-purpose controllers from China-based MOXA. A security vulnerability exists in MOXA ioLogik 4000 Series v1.6 and earlier versions, which stems from the ability to gain unauthorized access, potentially leading to the disclosure of sensitive informatio...

MOXA ioLogik 4000 Series 安全漏洞

MOXA ioLogik 4000 Series is a series of general-purpose controllers from China-based MOXA. A security vulnerability exists in MOXA ioLogik 4000 Series v1.6 and earlier versions, which stems from a vulnerability that could allow an attacker to trick a user into interacting with malicious content,...

PT-2023-27495 · Lg · Lg Supersign Media Editor

Name of the Vulnerable Software and Affected Versions: LG SuperSign Media Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this...

The vulnerability of the Google Chrome XML browser component allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Google Chrome XML browser component is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

CraftCMS 注入漏洞

CraftCMS is a content management system from CraftCMS, Inc. CraftCMS suffers from an injection vulnerability that stems from the fact that bypassing the validatePath function can lead to potential remote code execution, which can be exploited by an attacker to cause malicious control of a...

libvmod-digest 缓冲区错误漏洞

libvmod-digest is used to compute HMAC, message digests. A security vulnerability exists in libvmod-digest versions prior to 1.0.3, which stems from an out-of-bounds memory access during base64 decoding, leading to authentication bypass and information disclosure...

PT-2023-27190 · Hitachi · Hitachi Eh-View

Name of the Vulnerable Software and Affected Versions: Hitachi EH-VIEW KeypadDesigner affected versions not specified Description: The issue is related to an Improper Restriction of Operations within the Bounds of a Memory Buffer, which allows local attackers to potentially disclose information a...