Zyxel ATP 格式化字符串错误漏洞

Zyxel ATP is a firewall from Zyxel China. A security vulnerability exists in Zyxel ATP ZLD V5.10 through V5.36 Patch 2, USG FLEX ZLD V5.00 through V5.36 Patch 2, USG FLEX 50W / USG20W-VPN ZLD V5.10 through V5.36 Patch 2, VPN ZLD V5.00 through V5.36. A security vulnerability exists in Patch 2...

PT-2023-7593 · Asus · Asus Rt-Ac86U +1

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX56U V2 version 3.0.0.4.386 50460 ASUS RT-AC86U version 3.0.0.4 386 51529 Description: The issue is related to a format string vulnerability in the cm processChangedConfigMsg function of the AiMesh system. This vulnerability is cause...

PT-2023-4035 · Asus · Asus Rt-Ac86U +1

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX56U V2 version 3.0.0.4.386 50460 ASUS RT-AC86U version 3.0.0.4 386 51529 Description: A format string vulnerability is identified in the ASUS RT-AX56U V2 and RT-AC86U routers. This issue is caused by directly using input as a format...

Pixman 数字错误漏洞

Pixman is an open source and software library written in C for pixel manipulation that provides image compositing, image rasterization, and other functions. A security vulnerability exists in Pixman, which stems from the discovery of the inclusion of an FPE vulnerability on the stress-test branch...

DEBIAN-CVE-2023-29451

Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy...

Information disclosure

An information disclosure issue in Gitlab CE/EE affecting all versions from 13.6 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 16.1 prior to 16.1.1, resulted in the Sidekiq log including webhook tokens when the log format was set to default...

UBUNTU-CVE-2023-3363

An information disclosure issue in Gitlab CE/EE affecting all versions from 13.6 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 16.1 prior to 16.1.1, resulted in the Sidekiq log including webhook tokens when the log format was set to default...

CVE-2023-3363

Removed by vendor...

CVE-2023-3363 Insertion of Sensitive Information into Log File in GitLab

An information disclosure issue in Gitlab CE/EE affecting all versions from 13.6 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 16.1 prior to 16.1.1, resulted in the Sidekiq log including webhook tokens when the log format was set to default...

PT-2023-25913 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

PT-2023-25916 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

PT-2023-25919 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

PT-2023-24415 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: Gitlab CE/EE versions 13.6 through 15.11.10 Gitlab CE/EE versions 16.0 through 16.0.6 Gitlab CE/EE versions 16.1 through 16.1.1 Description: An information disclosure issue resulted in the Sidekiq log including webhook tokens when the log...

CVE-2023-26590

A floating point exception vulnerability was found in sox, in the lsxaiffstartwrite function at sox/src/aiff.c:622:58. This flaw can lead to a denial of service...

PT-2023-4837 · Asus · Asus Rt-Ac86U +2

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX55 versions affected versions not specified ASUS RT-AX56U V2 versions affected versions not specified ASUS RT-AC86U versions affected versions not specified Description: The issue is related to a format string vulnerability in the...

The vulnerability of the console-based graphic editor ImageMagick arises from the lack of data cleaning at the control level when processing parameters like video:vsync or video:pixel-format. This allows an attacker to execute arbitrary commands.

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of measures taken at the control level when processing parameters like video:vsync or video:pixel-format. Exploiting this vulnerability allows an attacker to execute arbitrary commands using specially created...

PT-2023-4801 · Asus · Asus Rt-Ac86U +2

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX56U V2 affected versions not specified ASUS RT-AX55 affected versions not specified ASUS RT-AC86U affected versions not specified Description: A format string vulnerability is identified in the General function API of the affected...

CVE-2023-30195

In the module "Detailed Order" lgdetailedorder in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can download personal informations without restriction formatted in json...

UBUNTU-CVE-2023-37454

An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udfputsuper and udfcloselvid functions in fs/udf/super.c. NOTE: the suse.com reference has a different perspective about this...

CVE-2023-25096

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...