3355 matches found
CVE-2023-32054
Volume Shadow Copy Elevation of Privilege Vulnerability...
CVE-2023-32042
OLE Automation Information Disclosure Vulnerability...
CVE-2023-32033
Microsoft Failover Cluster Remote Code Execution Vulnerability...
CVE-2023-32034
Remote Procedure Call Runtime Denial of Service Vulnerability...
CVE-2023-35780
Cross-Site Request Forgery CSRF vulnerability in Andy Whalen Galleria plugin = 1.0.3 versions...
UBUNTU-CVE-2023-33170
ASP.NET and Visual Studio Security Feature Bypass Vulnerability...
CVE-2023-24487
Arbitrary file read in Citrix ADC and Citrix Gateway...
CVE-2023-1691
Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2023-37239
Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program...
USN-6204-1 cpdb-libs vulnerability
Seth Arnold discovered that CPDB incorrectly handled certain characters. An attacker could possibly use this issue to cause a crash or execute arbitrary code...
CVE-2023-36807 Infinite Loop when reading malformed objects in pypdf
pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single co...
GHSA-P2MF-Q26J-3XMH PlantUML Improper Access Control vulnerability
Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9...
GHSA-G753-GHR7-Q33W cyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new`
The function ChunkId::new creates a misaligned pointer by casting mutable pointer of u8 slice which has alignment 1 to the mutable pointer of u32 which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function...
CVE-2023-33289
The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service ReDos via a crafted URL to lib.rs. NOTE: the Supplier disputes this, taking the position that "Slow printing of URLs is not a CVE."...
acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +866 more potentially affected by CVE-2023-53159 via openssl (>=0.2.18, <=0.10.52)
openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: CVE-2023-53159 Source advisory: OSV:RUSTSEC-2023-0044...
CVE-2023-34166
Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerability may cause the system to restart...
CVE-2022-48494
Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized...
USN-6176-1 pypdf2 vulnerability
It was discovered that PyPDF2 incorrectly handled certain PDF files. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to consume system resources, resulting in a denial of service...
CVE-2023-21122
In various functions of various files, there is a possible way to bypass the DISALLOWDEBUGGINGFEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...