8889 matches found
CVE-2023-49117
PowerCMS 6 Series, 5 Series, and 4 Series contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. Note that all versions of PowerCMS 3 Series and earlier which are unsupported End-of-Life, EOL...
CVE-2023-50297
Open redirect vulnerability in PowerCMS 6 Series, 5 Series, and 4 Series allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL. Note that all versions of PowerCMS 3 Series and earlier which are unsupported End-of-Life, EOL are also affected ...
CVE-2023-47247
In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102...
PT-2023-30389 · Sysaid · Sysaid On-Premise
Name of the Vulnerable Software and Affected Versions: SysAid On-Premise versions prior to 23.3.34 Description: The issue allows an end user to delete a Knowledge Base article under certain conditions. Recommendations: For versions prior to 23.3.34, update to version 23.3.34 or later to resolve t...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type vulnerability in Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End.This issue affects User Submitted Posts – Enable Users to Submit Posts from the Front End: from n/a through 20230902...
CVE-2023-45603
CVE-2023-45603 concerns the WordPress plugin User Submitted Posts (Jeff Starr) with an Unrestricted Upload of File with Dangerous Type, enabling unauthenticated users to upload arbitrary files via the usp_attach_images path. Public sources (NVD/Wordfence, Patchstack) identify this as a high-sever...
PT-2023-31851 · Foxit · Foxit Pdf Reader
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...
Microsoft Teams 2.1 supported for VDI/DaaS
Information Overview Microsoft has released new Teams for VDI in early December 2023. The new version of Teams has been re-implemented and promises improvements in performance, memory consumption, usability, and security. Here is a link to some information about the new Teams -...
Zabbix Security Vulnerabilities
Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. A security vulnerability exists in Zabbix Server that stems from a received session cookie that can be used to access the front-end as a...
PT-2023-8398
Name of the Vulnerable Software and Affected Versions D-Link DIR-859 version 1.06B01 Description A critical vulnerability has been found in the D-Link DIR-859 router, affecting some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the...
CLSA-2023-1702495051 perl: Fix of CVE-2023-47100
CVE-2023-47100: fix read/write past buffer end...
Adobe Illustrator 安全漏洞
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause a read beyond the end of an allocated memory structure...
[SECURITY] [DLA 3685-1] debian-security-support security update
Debian LTS Advisory DLA-3685-1 [email protected] https://www.debian.org/lts/security/ Holger Levsen December 13, 2023 https://wiki.debian.org/LTS Package : debian-security-support Version : 1:10+2023.13.12 Debian Bug : 982258, 1056606, 1053109. debian-security-support, the Debian securi...
DEBIAN-CVE-2023-5379
A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error state by modcluster in httpd, causing JBoss EAP to close the TCP connection without returning an AJP response. This happens because modproxycluster...
December 12, 2023—KB5033429 (Monthly Rollup)
None None...
December 12, 2023—KB5033375 (OS Builds 22621.2861 and 22631.2861)
None None...
December 12, 2023—KB5033420 (Monthly Rollup)
None None...
December 12, 2023—KB5033424 (Security-only update)
None None...