12738 matches found
Citrix Director throws “Unexpected Server Error” while clicking on the Trends Tab
Citrix Director throws “Unexpected Server Error” while clicking on the Trends Tab Event ID 5 is logged in Citrix Director, pointing to failure while connecting to data source. The CDF Traces captured from Director Server, show the exception "Unexpected character encountered while parsing value" D...
Lose due to rounding. Use more precise library for mathematical operations
Lines of code Vulnerability details Impact The mulDivDown function, assumed to be from FixedPointMathLib, is likely designed to multiply two numbers and then divide the result, rounding down any remainders. This rounding down can result in minor discrepancies when converting between assets and...
Advisory ROSA-SA-2023-2230
Software: rsync 3.1.3 OS: ROSA Virtualization 2.1 packageevrstring: rsync-3.1.3.src.rpm CVE-ID: CVE-2018-25032 BDU-ID: 2022-01641 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the zlib library is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could...
PYSEC-2023-169
Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...
Business Logic Errors
vyper is vulnerable to Business Logic Errors. The vulnerability exists because the order of evaluation of the arguments of the builtin functions uint256addmod, uint256mulmod, ecadd and ecmul does not follow source order, which can be exploited by an attacker to create contracts that behave...
Qualcomm Chipsets Buffer Error Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the WLAN HAL...
The vulnerability of the PostPolicyBucket component of the MinIO storage server allows a perpetrator to execute arbitrary code.
The vulnerability of the PostPolicyBucket component of the MinIO storage server is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially crafted HTTP requests...
ROS-20230905-01
A vulnerability in the Bluetooth permission verification subsystem of the Linux kernel is associated with errors in the processing of input data. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary commands by sending specially crafted requests...
ROS-20230905-02
Vulnerability in the ksmbd module of Linux kernel operating systems is related to synchronization errors when using a shared resource. synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code using the...
The vulnerability of the SICAM TOOLBOX II engineering software, related to access control errors, allows a intruder to execute arbitrary commands with elevated privileges.
The vulnerability of the SICAM TOOLBOX II engineering software is related to access control errors. Exploiting this vulnerability can allow attackers to execute arbitrary commands with elevated privileges...
PT-2023-4810 · Unknown · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.10.10 XWiki Platform versions prior to 15.4 RC1 Description: The issue is related to errors in authorization, allowing a remote attacker to execute arbitrary web scripts with elevated privileges. In XWiki, ...
CVE-2023-39356
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function gdimultiopaquerect. In particular there is no code to validate if the value...
PT-2023-36731
Уязвимость функции fq pie change модуля net/sched/sch fq pie.c подсистемы управления трафиком net/sched ядра операционной системы Linux связана с ошибками обработки данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
The vulnerability of the OPC UA Server software for integration systems and automation devices in industrial applications allows a perpetrator to trigger a service failure.
The vulnerability of the OPC UA Server software for integration systems and automation devices in industrial applications is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...
PT-2023-5774 · Acronis · Acronis Agent +1
Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 30600 Acronis Cyber Protect 15 versions prior to build 35979 Description: The issue is related to errors in cryptographic signature verification, allowing for local privilege escalation due to the...
The vulnerability of the microprogrammed software of Moxa’s TN-4900 and TN-5900 series routers allows for the execution of arbitrary code.
The vulnerability of Moxa TN-4900 and TN-5900 router microprogramming software is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the microprogrammed software of Moxa’s TN-5900 series routers allows for the execution of arbitrary code.
The vulnerability of Moxa TN-5900 series router microprogramming software is related to errors in processing input data during the certification creation process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the microprogrammed software of Moxa’s TN-5900 series routers allows for the execution of arbitrary code.
The vulnerability of Moxa TN-5900 series router microprogramming software is related to errors in the processing of input data during the key generation function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
DEBIAN-CVE-2023-40184
xrdp is an open source remote desktop protocol RDP server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The authstartsession function can return non-zero 1 value on, e.g., PAM error which may result in in session...
