4477 matches found
CVE-2023-37920
CVE-2023-37920 affects the Python Certifi package: Certifi before 2023.07.22 includes the e-Tugra root certificates, which were removed in 2023.07.22 due to security concerns. The vulnerability is documented with high/critical impact in CVSS vectors across sources, and advisories across multiple ...
Check Point Response to CVE-2023-28130 - Hostname command injection in Gaia Portal
Symptoms - Local user may lead to privilege escalation using Gaia Portal "Hosts and DNS" page. This issue received the ID CVE-2023-28130. Solution This problem was fixed. The fix adds more validations on user input and is included starting from: Check Point R82 Jumbo Hotfix Accumulator for R81.20...
CVE-2023-3322
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts...
CVE-2023-3321
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts...
CVE-2023-3322
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts...
CVE-2023-3322 Code Execution through overwriting service executable in utilities directory
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts...
CVE-2023-3321 Code Execution through Writable Mosquitto Configuration File
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts...
Path Traversal
mlflow is vulnerable to Path Traversal. An attacker is able to use faulty path validation middleware to get around security measures on Windows hosts and take complete control of the host's file system. This enables absolute Windows file paths to be used for file listing, reading, writing, and...
CVE-2023-37601
Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...
CVE-2023-37601
Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...
CVE-2023-37601
Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...
New P2PInfect Worm Targeting Redis Servers on Linux and Windows Systems
Cybersecurity researchers have uncovered a new cloud targeting, peer-to-peer P2P worm called P2PInfect that targets vulnerable Redis instances for follow-on exploitation. "P2PInfect exploits Redis servers running on both Linux and Windows Operating Systems making it more scalable and potent than...
CVE-2023-37601
Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...
Ubuntu: Security Advisory (USN-6237-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MobiSystems Office Suite Premium 路径遍历漏洞
MobiSystems Office Suite Premium is an office software suite from MobiSystems, Inc. A security vulnerability exists in MobiSystems Office Suite Premium version 10.9.1.42602, which stems from a Local File Inclusion LFI vulnerability in the component assembly /etc/hosts...
CVE-2023-37601
Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...
CVE-2023-37601
Office Suite Premium v10.9.1.42602 contains a local file inclusion (LFI) vulnerability in the /etc/hosts component. The issue is documented in CVE-2023-37601 with a CVSS v3.1 base score of 7.5 (High) and a network attack vector, no user interaction required, and no confidentiality is impacted bey...
USN-6237-2: curl regression
USN-6237-1 fixed vulnerabilities in curl. The update caused a certificate wildcard handling regression on Ubuntu 22.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Hiroki Kurosawa discovered that curl incorrectly handled validating certain...
Malicious code in ux-logging-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 649b80a17f0912d20e34627fb9fcb9ee23f7e5dcbe67f9082d4499956d68f3a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
