18386 matches found
Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-3922-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3922-1 advisory. It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information...
WordPress Plugin BEAR Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
GHSA-HMGW-9JRG-HF2M Directus crashes on invalid WebSocket message
Summary It seems that any Directus installation that has websockets enabled can be crashed if the websocket server receives an invalid frame. This could probably be posted as an issue and I might even be able to put together a pull request for a fix if only I had some extra time..., but I decided...
PT-2023-29709 · Directus · Directus
Name of the Vulnerable Software and Affected Versions: Directus versions prior to 10.6.2 Description: Directus is a real-time API and App dashboard for managing SQL database content. In affected versions, any Directus installation that has websockets enabled can be crashed if the websocket server...
Directus Security Vulnerabilities
Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A security vulnerability exists in Directus that stems from the fact that any Websocket-enabled Directus installation may crash if the Websocket server receives invalid frames...
The vulnerability of the Sangfor NGAF firewall lies in the lack of protection for service data, allowing attackers to obtain the original PHP code.
The vulnerability of the Sangfor NGAF firewall lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain the original PHP code by sending a specially crafted HTTP request with an invalid Content-Length field...
SUSE CVE-2023-5422
The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the SSLgetverifyresult function is not used the certificated is trusted always and it can not be ensured that the certificate satisfies all necessary securit...
CVE-2023-29484
In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...
Default credentials
In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...
UBUNTU-CVE-2023-5422
The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the SSLgetverifyresult function is not used the certificated is trusted always and it can not be ensured that the certificate satisfies all necessary securit...
CVE-2023-5422
The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the SSLgetverifyresult function is not used the certificated is trusted always and it can not be ensured that the certificate satisfies all necessary securit...
CVE-2023-5422 SSL Certificates are not checked for E-Mail Handling
The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the SSLgetverifyresult function is not used the certificated is trusted always and it can not be ensured that the certificate satisfies all necessary securit...
PT-2023-22276 · Terminalfour · Terminalfour
Name of the Vulnerable Software and Affected Versions: Terminalfour versions prior to 8.3.16 Description: The issue allows misconfigured LDAP users to login with an invalid password. Recommendations: For versions prior to 8.3.16, update to version 8.3.16 or later to resolve the issue...
CVE-2023-29484
In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...
Terminalfour Security Vulnerability
Terminalfour is a digital marketing and web content management platform for higher education from US-based Terminalfour. A security vulnerability exists in versions of Terminalfour prior to 8.3.16 that stems from a misconfigured LDAP user being able to log in with an invalid password...
CVE-2023-29484
In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...
RUSTSEC-2023-0087 `MaybeUninit` misuse in `simd-json-derive`
An invalid use of MaybeUninit::uninit.assumeinit in simd-json-derive's derive macro can cause undefined behavior. The original code used MaybeUninit to avoid initialisation of the struct and then set the fields using ptr::write. The undefined behavior triggered by this misuse of MaybeUninit can...
PBM Error "Authentication failed: Invalid credentials" when adding machine to one catalog
When attempting to add machines to an existing catalog the process fails immediately with the below error, in Studio. "Machine Failures: domainname\machinename: Failed to create the virtual machine; domainname\machinename. Inner Error: A general system error occurred: PBM error occurred during...
[Important] [Security] Virtuozzo ReadyKernel Patch 162.0 for Virtuozzo Hybrid Server 7.5
The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5. Vulnerability id: CVE-2023-42753 3.10.0-1160.53.1.vz7.185.3 to 3.10.0-1160.90.1.vz7.200.7 Out-of-bounds memory access in the ipset module...
Open5GS Denial of Service Vulnerability (CNVD-2023-96086)
Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS version 2.4.10 and earlier due to an invalid pointer release flaw in the ogssbimessagefree function, which can be exploited by an attacker ...