GLSA-202401-07 : R: Directory Traversal

The remote host is affected by the vulnerability described in GLSA-202401-07 R: Directory Traversal - The R programming language's default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R...

The vulnerability of the MMS interpreter in the WagoAppRTU library of the Wago Telecontrol configuration tool allows a perpetrator to cause a service failure.

The vulnerability of the MMS interpreter in the WagoAppRTU library of the Wago Telecontrol configuration tool is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending specially crafted MMS...

Debian: Security Advisory (DSA-5578-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5578-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5578-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2023 https://www.debian.org/security/faq -...

[SECURITY] Fedora 39 Update: perl-5.38.2-502.fc39

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

CVE-2023-5188

The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected...

CVE-2023-5188

The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected...

Design/Logic Flaw

The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected...

CVE-2023-5188

CVE-2023-5188 concerns the MMS Interpreter of WagoAppRTU used by the WAGO Telecontrol Configurator. Affected: WAGO AppRTU MMS interpreter in versions below 1.4.6.0. Root cause: vulnerability to malformed packets that can be crafted remotely, allowing a remote, unauthenticated attacker to trigger ...

Wago RTU Input Validation Error Vulnerability

The WAGO RTU is a remote terminal unit from WAGO Germany for remotely monitored and controlled devices. An input validation error vulnerability exists in Wago RTU versions prior to 1.4.6.0. The vulnerability stems from the susceptibility of the WagoAppRTU MMS interpreter to incorrectly formatted...

CVE-2023-48863

SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attacker uses the existing application to inject malicious SQL commands into the background database engine for execution, and sends some attack codes as commands or query statements...

The vulnerability of the S_find_uninit_var function (sv.c) in the Perl interpreter allows a hacker to execute arbitrary code.

The vulnerability of the Sfinduninitvar function in sv.c of the Perl interpreter is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the njs_dump_is_recursive function (rc/njs_vmcode.c) in the njs interpreter of the nginx server allows a attacker to cause a service failure.

The vulnerability of the njsdumpisrecursive function rc/njsvmcode.c in the njs interpreter of the nginx server involves reading beyond the memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Vulnerability of the njs_lvlhsh_find function in the njs interpreter of the nginx server, allowing a hacker to cause a service failure

The vulnerability of the jsvmcodereturn function src/njsvmcode.c in the njs interpreter of the nginx server is related to reading beyond the memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the njs_vmcode_return function (src/njs_vmcode.c) in the njs interpreter of the nginx server allows a hacker to cause a service failure.

The vulnerability of the njsvmcodereturn function src/njsvmcode.c in the njs interpreter of the nginx server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the njs_function_frame function (src/njs_function.h) in the njs interpreter of the nginx server allows a hacker to cause a service failure.

The vulnerability of the njsfunctionframe function src/njsfunction.h in the njs interpreter of the nginx server is related to reading beyond the memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

When upgrading NetScaler getting error -bash: ./installns: /usr/bin/perl: bad interpreter

When upgrading NetScaler getting error ./installns: /usr/bin/perl: bad interpreter: No such file or directory...

Heap overflow

An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the wasmloaderpreparebytecode function in core/iwasm/interpreter/wasmloader.c...

Oracle Linux 8 : ghostscript (ELSA-2023-7053)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7053 advisory. - fix for CVE-2023-4042 - fix for CVE-2023-38559 - fix for CVE-2023-28879 Tenable has extracted the preceding description block directly from the Oracl...

Liblisp Security Vulnerabilities

Liblisp is James personal developer of a lisp interpreter. The library can be written in c99. Liblisp has a security vulnerability that stems from a memory out-of-bounds read problem...