13389 matches found
Lenovo WMI Driver Modification
The vulnerability of the WMI driver for Lenovo notebook microprogramming systems is related to errors in the use of standard permissions. Exploiting this vulnerability allows an attacker to modify security boot parameters through the NVRAM variable...
ALPINE-CVE-2023-28322
An information disclosure vulnerability exists in curl v8.1.0 when doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously wasused to issue a PUT request...
PT-2023-23716
Name of the Vulnerable Software and Affected Versions Sofia-SIP versions prior to 1.13.15 Description Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Several potential heap-over-flow and integer-overflow vulnerabilities were found in stun parse...
Firefox ESR Spoofing
The vulnerability of Firefox and Firefox ESR browsers is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...
Firefox ESR Data Type Mixing DoS
The vulnerability of Firefox and Firefox ESR browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created website...
grafana-pcp security update
3.2.0-3 - resolve CVE-2022-27664 grafana-pcp: golang: net/http: handle server errors after sending GOAWAY...
ksmbd Module Code Execution
The vulnerability of the ksmbd module in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using the SMB2QUERYINFO and SMB2LOGOFF commands...
ksmbd Module Code Execution
The vulnerability of the ksmbd module in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the integrity, availability, and confidentiality of protected information, and to execute arbitra...
K000134725: vm2 vulnerability CVE-2023-29017
Security Advisory Description vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Prior to version 3.9.15, vm2 was not properly handling host objects passed to Error.prepareStackTrace in case of unhandled async errors. A threat actor could bypass the sandbox...
Store Creation Fails with "Set-DSNewClusterEnvironment" privilege related errors
The below error occured when the user is creating new stores on the Storefront server: Citrix.DeliveryServices.PowerShell.Command.RunnerInterfaces.Exceptions.PowerShellExecutionException: An error occurred running the command: 'Set-DSNewClusterEnvironment' Not possible to enable all the required...
FlexNet Publisher License Server DoS
The vulnerability of the license server dispatcher lmadmin FlexNet Publisher is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions...
Windows Revocation List Driver Bypass
The vulnerability of the Windows operating system’s Revocation List driver is related to security configuration errors. Exploiting this vulnerability could allow a hacker to circumvent existing security restrictions...
GHSA-W3F6-PC54-GFW7 swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding
A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. It is fixed in 1.19.2 and later releases. There are a number of...
Moderate: Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.1.1 security update
Secondary Scheduler Operator for Red Hat OpenShift 1.1.1 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...
FreeBSD : electron -- vulnerability (b09d77d0-b27c-48ae-b69b-9641bb68b39e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b09d77d0-b27c-48ae-b69b-9641bb68b39e advisory. - An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML...
Improper Input Validation
org.apache.sling.commons.json is vulnerable to Improper Input Validation. The vulnerability exists because the library does not properly validate user inputs, which allows an attacker to trigger unexpected errors by supplying maliciously crafted input...
PT-2023-3140 · Huawei · Huawei Ar Routers
Name of the Vulnerable Software and Affected Versions: Huawei routers affected versions not specified Description: The issue is related to a traffic hijacking vulnerability. It can be exploited to hijack packets by attackers. The vulnerability is associated with errors in access control when...
389 Directory Server Resource Leak DoS
The vulnerability of the 389 Directory Server catalog service server is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...
389 Directory Server Pointer Assignment DoS
The vulnerability of the 389 Directory Server catalog service server is related to pointer redirection errors. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
Business Logic Flaws
pimcore/customer-management-framework-bundle is vulnerable to Business Logic Flaws. The Conditions tab is vulnerable to business logic errors due to allowing a negative number as a counter...