CVE-2023-43633 Debug Functions Unlockable Without Triggering Measured Boot

On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the file exists, it overrides the existing configuration on the device on boot. This allows an attacker to change the system’s configuration, which also includes some debug functions...

CVE-2023-43633 Debug Functions Unlockable Without Triggering Measured Boot

On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the file exists, it overrides the existing configuration on the device on boot. This allows an attacker to change the system’s configuration, which also includes some debug functions...

PT-2023-36028 · Git +1 · File

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Heap-double-free. The crash state involves functions such as regcomp, file regcomp, and load 1. No...

PT-2023-36617

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4c4v-42hc-72p6. This link is maintained to preserve external references. Original Description On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the...

CVE-2023-43633: Insufficiently Protected Credentials

On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the file exists, it overrides the existing configuration on the device on boot. This allows an attacker to change the system’s configuration, which also includes some debug functions...

io.quarkus:quarkus-amazon-lambda-http (1.10.1.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.10.1.final) +72 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.10.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.10.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.10.1.final -...

io.quarkus:quarkus-azure-functions-http (0.23.0), io.quarkus:quarkus-azure-functions-http-deployment (0.23.0) +38 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (0.23.0)

io.quarkus:quarkus-vertx-http MAVEN version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-azure-functions-http 0.23.0 - io.quarkus:quarkus-azure-functions-http-deployment...

io.quarkus:quarkus-azure-functions-http (0.23.2), io.quarkus:quarkus-azure-functions-http-deployment (0.23.2) +49 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (0.23.2)

io.quarkus:quarkus-vertx-http MAVEN version 0.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-azure-functions-http 0.23.2 - io.quarkus:quarkus-azure-functions-http-deployment...

io.quarkus:quarkus-amazon-lambda-http (1.8.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.8.0.cr1) +70 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.8.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.8.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.3.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.0.cr1) +51 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.3.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.3.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.3.0.cr2), io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.0.cr2) +51 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.3.0.cr2)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.3.0.cr2 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.7.0.cr2), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.0.cr2) +68 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.0.cr2)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.0.cr2 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.7.3.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.3.final) +69 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.3.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.3.final -...

io.quarkus:quarkus-amazon-lambda-http (1.7.4.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.4.final) +68 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.4.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.4.final -...

File Upload vulnerability in Dolibarr ERP CRM

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

GHSA-G8H7-MCP6-PF47 File Upload vulnerability in Dolibarr ERP CRM

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

CVE-2023-38887

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

UBUNTU-CVE-2023-38887

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

Unrestricted file upload

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

PT-2023-36027 · Git +1 · Mrab-Regex

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue. The crash state includes functions such as bytes1 char at, ascii at line end, and try match. Recommendations: At the moment, there is no...