17618 matches found
CVE-2022-22732
EcoStruxure Power Commission (Schneider Electric) versions prior to V2.22 are affected by CWE-668: Exposure of Resource to Wrong Sphere, which could allow remote domains to access server data via a fetch from a third-party or malicious site. The root cause is improper data sphere exposure, enabli...
Incorrect calculation
Lines of code Vulnerability details Impact On line 119, the result of the conversion is always going to be zero. Therefore, functions that apply onlyDriver modifier will never be executed. Proof of Concept Please deploy the code below to test the modifier's broken implementation. //...
CVE-2022-41029
CVE-2022-41029 is a set of stack-based buffer overflow vulnerabilities in the DetranCLI command parsing of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos confirms multiple vulnerable command templates (notably wlan filter mac address WORD descript WORD) that use unsafe formatting (sprintf) lea...
CVE-2022-3488
Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that would cause the resolver to reject the query response, such a...
CVE-2020-22327
An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered when the administrator views the information...
CVE-2022-42412
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
PT-2023-13766 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...
GHSA-Q9HR-J4RF-8FJC JWT audience claim is not verified
Impact All versions of Argo CD starting with v1.8.2 are vulnerable to an improper authorization bug causing the API to accept certain invalid tokens. OIDC providers include an aud audience claim in signed tokens. The value of that claim specifies the intended audiences of the token i.e. the servi...
CVE-2022-3924
CVE-2022-3924 is a vulnerability in ISC BIND where stale-answer-client-timeout (enabled with a positive value) can cause a race between returning a stale answer and an early SERVFAIL, potentially triggering an assertion failure and DoS. Affected are BIND 9.16.12–9.16.36, 9.18.0–9.18.10, 9.19.0–9....
CVE-2022-3488
ISC BIND is affected by CVE-2022-3488: when a resolver processes repeated responses to the same query that include ECS pseudo-options, if the first response is broken, the named process can exit with an assertion failure. Affected are BIND 9.x releases: 9.11.4-S1–9.11.37-S1 and 9.16.8-S1–9.16.36-...
PT-2023-14397 · Ibm · Ibm Websphere Application Server
Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 8.5 through 9.0 Description: The issue is related to the use of weaker than expected cryptographic keys in the traditional container of IBM WebSphere Application Server, which could allow an attacker ...
Siemens Web Server of SCALANCE X200 Heap-Based Buffer Overflow (CVE-2021-25668)
A vulnerability has been identified in SCALANCE X200-4P IRT All versions 5.5.1, SCALANCE X201-3P IRT All versions 5.5.1, SCALANCE X201-3P IRT PRO All versions 5.5.1, SCALANCE X202-2 IRT All versions 5.5.1, SCALANCE X202-2P IRT incl. SIPLUS NET variant All versions 5.5.1, SCALANCE X202-2P IRT PRO...
CVE-2023-24494
Tenable.sc versions prior to 6.0.0 are affected by a stored XSS vulnerability (CVE-2023-24494) due to improper validation of user-supplied input. An authenticated attacker can entice a user to click a crafted URL, causing script execution in the user’s browser session. The issue is rooted in inpu...
State Sponsored Attacks in 2023 and Beyond
As we begin 2023 I wanted to take some time and look at the state sponsored threat landscape. Over the last few decades weve seen seismic shifts in how state sponsored actors attack, starting with traditional espionage with attacks like Moonlight Maze and Project Gunman and evolving into more...
CVE-2023-23950
Technical details about CVE-2023-23950 are not present in the provided connected documents; the materials only restate the CRLF-splitting vulnerability without product/version specifics. Monitor for updates.
CVE-2022-47012
CVE-2022-47012 concerns GNS3 dynamips 0.2.21 with an uninitialized variable in the function gen_eth_recv. The vulnerability affects the dynamips component (gen_eth_recv) and enables network-exposed impact with availability impact listed as HIGH; no official patch/version fix is provided in the do...
CVE-2021-33641
CVE-2021-33641 is a vulnerability in byacc where, during file processing, malloc stores the current line data and, while handling comments, accesses released memory (use-after-free). Multiple connected advisories (EulerOS, Red Hat, Amazon Linux 2023) cite this issue along with CVE-2021-33642, whi...
CVE-2022-39193
Summary: CVE-2022-39193 affects the MediaWiki CheckUser extension (through 1.39.x). The vulnerability concerns disclosure of sensitivity about editors: various components of CheckUser can expose information about the performer of edits and logged actions, information that should be viewable only ...
CVE-2023-22863
IBM Robotic Process Automation 20.12.0 through 21.0.2 defaults to HTTP in some RPA commands when the prefix is not explicitly specified in the URL. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 244109...
