CVE-2023-1887 Business Logic Errors in thorsten/phpmyfaq

Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-27491

A flaw was found in Envoy that may allow attackers to send specially crafted HTTP/2 or HTTP/3 requests to trigger parsing errors on the upstream HTTP/1 service...

The vulnerability of the WorkSource function in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the WorkSource function in Android operating systems is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge browsers allows attackers to escalate their privileges.

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

The vulnerability of extensions for providing access to InTouch Access Anywhere and Plant SCADA Access Anywhere, related to errors in processing the relative path to the catalog, allows a hacker to gain read access to files located outside the protected web server.

The vulnerability of extensions for providing access to InTouch Access Anywhere and Plant SCADA Access Anywhere lies in errors in processing the relative path to the catalog. Exploiting this vulnerability could allow a malicious actor to gain read access to files located outside the protected web...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in errors in XML request processing, which allow attackers to gain unauthorized access to protected information.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to errors in processing XML requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the bridge2 component of the Bridge interface in the RouterOS operating system of MikroTik routers allows a hacker to cause a service failure.

The vulnerability of the bridge2 component in the Bridge interface of the RouterOS operating system for MikroTik relates to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failure by sending specially crafted packets...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to errors in TrustCor (CVE-2022-23491)

Summary BM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to errors in TrustCor CVE-2022-23491 due to TrustCor's ownership and operation of a business that produced spyware. CVE-2022-23491. This component was previously included as part of the Base OS used by our servic...

OESA-2023-1188 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.CVE-2022-27672 A flaw was found in...

Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2023-25117)

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to resource management errors, which can be exploited to execute arbitrary code in the context of the current process...

CVE-2023-1014

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting.This issue affects Vira-Investing: before 1.0.84.86...

An attacker can manipulate the preDepositvePrice to steal from other users.

Lines of code Vulnerability details Impact The first user that stakes can manipulate the total supply of sfTokens and by doing so create a rounding error for each subsequent user. In the worst case, an attacker can steal all the funds of the next user. Proof of Concept When the first user enters...

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to resource management errors, which can be exploited by attackers to execute code in the current process...

The vulnerability of the `process.mainModule.require()` function in the Node.js software platform allows attackers to gain increased privileges.

The vulnerability of the process.mainModule.require function in the Node.js software platform is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Slapi-nis package for 389 Directory Server allows a hacker to trigger a service failure.

The vulnerability of the Slapi-nis package for 389 Directory Server is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Microsoft Edge’s vulnerability, related to security configuration errors, allows attackers to circumvent security restrictions.

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions by opening a specially created malicious web page...

The vulnerability of the kvm_vcpu_ioctl_x86_getdebugregss() function (arch/x86/kvm/x86.c) in the KVM virtualization subsystem of the Linux operating system allows a attacker to gain access to protected information.

The vulnerability of the kvmvcpuioctlx86getdebugregss function arch/x86/kvm/x86.c in the KVM virtualization subsystem of the Linux operating system is related to errors during initialization. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the `derive_boundaryStrength` function in the deblock.cc component of the h.265 Libde265 video codec implementation, which allows a hacker to cause a service failure.

The vulnerability of the deriveboundaryStrength function in the deblock.cc component of the h.265 Libde265 video codec implementation is related to errors during resource release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of software for storing images with a wide dynamic range of brightness, related to pointer swapping errors, allows attackers to trigger a service failure.

The vulnerability of software for storing images with a wide dynamic range of brightness in OpenEXR is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Microsoft Edge’s vulnerability, related to synchronization errors when using a shared resource, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to gain increased privileges...