9115 matches found
PT-2023-6781
Name of the Vulnerable Software and Affected Versions SysAid On-Premise versions prior to 23.3.36 Description A path traversal vulnerability in SysAid On-Premise software leads to code execution after an attacker writes a file to the Tomcat webroot. This issue has been exploited in the wild, with...
kernel: drm/amdgpu/powerplay/psm: Fix memory leak in power state init
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/powerplay/psm: Fix memory leak in power state init Commit 902bc65de0b3 "drm/amdgpu/powerplay/psm: return an error in power state init" made the power state init function return early in case of failure to get an entry...
kernel: KVM: s390: pv: fix index value of replaced ASCE
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corresponding to a guest ASCE should be 0. When replacing the ASCE in s390replaceasce, the index of the new ASCE should also be set to 0. Having t...
kernel: x86/mm: Randomize per-cpu entry area
A possible unauthorized memory access flaw was found in the Linux kernel cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. This issue could allow a local user to gain access to some important data with expected locatio...
kernel: selinux: Add boundary check in put_entry()
In the Linux kernel, the following vulnerability has been resolved: selinux: Add boundary check in putentry Just like nextentry, boundary check is necessary to prevent memory out-of-bound access...
CVE-2023-46851 Apache Allura: sensitive information exposure via import
Allura Discussion and Allura Forum importing does not restrict URL values specified in attachments. Project administrators can run these imports, which could cause Allura to read local files and expose them. Exposing internal files then can lead to other exploits, like session hijacking, or remot...
libreoffice: Empty entry in Java class path
A flaw was found in LibreOffice. When an empty Java class path entry is configured, LibreOffice will search for Java classes in the current working directory, allowing malicious Java classes to load when opening a document using the file manager, resulting in arbitrary code execution...
Number withdrawn
Online Matrimonial Project is an online marriage recruitment program. This CVE number has been withdrawn...
PT-2025-26126 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A boundary check has been added in the put entry function to prevent memory out-of-bound access, similar to the check in next entry. This issue is related to the selinux component of t...
CVE-2022-3172
creationtimestamp| type| source ---|---|--- 2023-11-03 23:23:43+00:00| seen| https://t.me/cibsecurity/73549 2023-12-22 00:26:41+00:00| seen| https://t.me/ctinow/158085 2023-12-24 03:44:05+00:00| seen| https://t.me/arpsyndicate/2146 2025-03-13 20:14:03+00:00| seen|...
CVE-2023-5920 Lack Of Secure Keyboard Entry Protection in MacOS Desktop
Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to read the keyboard input...
CVE-2023-21395
creationtimestamp| type| source ---|---|--- 2023-10-30 21:19:48+00:00| seen| https://t.me/cibsecurity/73169 2025-07-26 21:08:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luvhsdzupir2...
exfatprogs Security Vulnerabilities
exfatprogs is exfatprogs open source an exFAT file system user space utility. A security vulnerability exists in exfatprogs versions prior to 1.2.2, which stems from an out-of-bounds memory access vulnerability in readfileentryset...
PT-2023-8383
Name of the Vulnerable Software and Affected Versions Apache Airflow Celery provider versions 3.3.0 through 3.4.0 Apache Airflow versions 1.10.0 through 2.6.3 Description The issue is related to the insertion of sensitive information into log files when using certain protocols as the Celery resul...
PT-2023-27437 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 Description: A privacy issue was addressed with improved private data redaction for log entries. An app may be able to read sensitive location information. Recommendations: For versions prior to 14.1, update to...
CVE-2023-46117
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities. A vulnerability has been identified in reconftw where inadequate validation of retrieved subdomains may lead to a Remote Code Execution R...
Design/Logic Flaw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities. A vulnerability has been identified in reconftw where inadequate validation of retrieved subdomains may lead to a Remote Code Execution R...
CLSA-2023-1697817694 quagga: Fix of 2 CVEs
CVE-2023-41360: don't read the first byte of ORF header if we are ahead of stream - CVE-2023-41358: do not process NLRIs if the attribute length is zero...
Ubuntu 16.04 ESM : Mercurial vulnerabilities (USN-5102-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5102-2 advisory. USN-5102-1 fixed vulnerabilities in Mercurial. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...