CVE-2023-5251: Missing Authorization

The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'gridplussavelayoutcallback' and 'gridplusdeletecallback' functions in versions up to, and including, 1.3.2. This makes it possible for authenticated...

SUSE CVE-2023-31422

An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. The issue impacts only Kibana version 8.10.0 when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern. Elastic has released Kibana 8.10.1...

Design/Logic Flaw

An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. The issue impacts only Kibana version 8.10.0 when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern. Elastic has released Kibana 8.10.1...

CVE-2023-31422

An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. The issue impacts only Kibana version 8.10.0 when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern. Elastic has released Kibana 8.10.1...

CVE-2023-31422 Kibana Insertion of Sensitive Information into Log File

An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. The issue impacts only Kibana version 8.10.0 when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern. Elastic has released Kibana 8.10.1...

CVE-2023-31422: Insertion of Sensitive Information into Log File

An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. The issue impacts only Kibana version 8.10.0 when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern. Elastic has released Kibana 8.10.1...

com.liferay:com.liferay.wiki.layout.prototype (>=1.0.5, <=1.0.9) potentially affected by CVE-2023-42628 via com.liferay:com.liferay.wiki.web (2.0.0)

com.liferay:com.liferay.wiki.web MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay:com.liferay.wiki.web and may be impacted: - com.liferay:com.liferay.wiki.layout.prototype =1.0.5, =1.0.9 Source cves: CVE-2023-42628 Source...

Adobe Bridge resource management error vulnerability

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a Resource Management Error vulnerability that stems from the presence of uncontrolled resource consumption by the application, which can be exploited by an attacker to bypass mitigations such as ASLR...

Siemens Xpedition Layout Browser Stack Overflow Vulnerability

Xpedition Layout Browser is a free tool to view and share Xedition PCB layout designs and schematic cross-probing to Xedition. Siemens Xpedition Layout Browser suffers from a stack overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...

Cross Site Scripting

zenario is vulnerable to Cross Site Scripting XSS. An attacker is able to execute arbitrary code via a crafted script to the Page Layout...

CVE-2023-30900

A vulnerability has been identified in Xpedition Layout Browser All versions VX.2.14. Affected application contains a stack overflow vulnerability when parsing a PCB file. An attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2023-30900

A vulnerability has been identified in Xpedition Layout Browser All versions VX.2.14. Affected application contains a stack overflow vulnerability when parsing a PCB file. An attacker can leverage this vulnerability to execute code in the context of the current process...

Stack overflow

A vulnerability has been identified in Xpedition Layout Browser All versions VX.2.14. Affected application contains a stack overflow vulnerability when parsing a PCB file. An attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2023-30900

CVE-2023-30900 affects Siemens Xpedition Layout Browser (all versions

CVE-2023-30900

A vulnerability has been identified in Xpedition Layout Browser All versions VX.2.14. Affected application contains a stack overflow vulnerability when parsing a PCB file. An attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2023-30900

A vulnerability has been identified in Xpedition Layout Browser All versions VX.2.14. Affected application contains a stack overflow vulnerability when parsing a PCB file. An attacker can leverage this vulnerability to execute code in the context of the current process...

libredwg:llvmfuzz: Heap-buffer-overflow in dxf_fixup_string

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4940101958107136 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

PT-2023-36070

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the dxf fixup string, dwg dxf LAYOUT private, and dwg dxf LAYOUT functions. No...

Siemens Xpedition Layout Browser security vulnerability

Xpedition Layout Browser is a free tool to view and share Xedition PCB layout designs and schematic cross-probing to Xedition. Siemens Xpedition Layout Browser suffers from a stack overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...

CVE-2023-30900: Stack-based Buffer Overflow

A vulnerability has been identified in Xpedition Layout Browser All versions VX.2.14. Affected application contains a stack overflow vulnerability when parsing a PCB file. An attacker can leverage this vulnerability to execute code in the context of the current process...