QMS.Mobile Module Code Execution

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers, QMS Automotive, is related to deficiencies in data storage. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

GNU Binutils compare_symbols() Buffer Overflow DoS

The vulnerability of the comparesymbols function in the GNU Binutils development toolset is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...

SslConnections Component DoS

The vulnerability of the SslConnections component in Eclipse Jetty servers is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

MariaDB field_conv.cc DoS

The vulnerability of the fieldconv.cc component in the MariaDB database management system is related to errors that occur during the code validation process. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Eclipse Jetty DoS

The vulnerability of Eclipse Jetty servlet containers is related to insufficient management of system resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Jackson-databind Unreliable Data DoS

The vulnerability of the Jackson-databind library in the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Netty Uncontrolled Recursion DoS

The vulnerability of the Netty network programming framework is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Update Citrix Secure Access and SSO apps to 23.09.1 before upgrading OS on Mac and iOS devices

In general we have seen two issues with the beta releases from Apple for Sonoma and iOS 17. So if the versions prior to 23.09.1 of the Citrix Secure Access and SSO apps are used with MacOS Sonoma and iOS/iPadOS 17, then the following issues would be seen: Apps will not be able to generate the log...

CMPappBP Component DoS

The vulnerability of the CMPappBP component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPapp Component DoS

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPapp Component DoS

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPapp Component DoS

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPapp Component DoS

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPapp Component DoS

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPappBP Component DoS

The vulnerability of the CMPappBP component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPappBP Component DoS

The vulnerability of the CMPappBP component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPappBP Component DoS

The vulnerability of the CMPappBP component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ldap test randomly fails through SSL_TCP Load Balancing Vserver on NetScaler

The customer configured ldap authentication through NetScaler SSLTCP LB Vserver for backend ldap server. Customer found ldap test fails randomly...

WordPress MasterStudy LMS Plugin < 3.0.18 is vulnerable to Privilege Escalation

Software MasterStudy LMS Type Plugin Vulnerable versions 3.0.18 Fixed in 3.0.18 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-4278 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID 7e43b36b9353 Credits Revan...

Quarkus HTTP Security Policy

The vulnerability of Quarkus’ HTTP framework policy is related to deficiencies in access control, due to the lack of measures to neutralize the exploitable vulnerabilities. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, gain unauthorized access to protecte...