12314 matches found
CLSA-2023-1692631677 php: Fix of 2 CVEs
CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing - CVE-2023-3824: Fix buffer mismanagement in phardirread...
The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x 18.x and 20.x. Please note that at the time this CVE was issued the policy is an experimental feature of Node.js.
...
CVE-2023-40352
McAfee Safe Connect VPN is impacted by CVE-2023-40352 in versions prior to 2.16.1.126. The issue is a local privilege escalation via loading arbitrary DLLs caused by an uncontrolled search path element. Public sources describe the root cause as related to DLL loading configurations (one advisory ...
CVE-2023-40352: Uncontrolled Search Path Element
McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs...
CVE-2023-4387
A use-after-free flaw was found in vmxnet3rqallocrxbuf in drivers/net/vmxnet3/vmxnet3drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3rqcleanupall, which could also lead to ...
SCADA Data Gateway Code Execution
The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2023-32006
The use of module.constructor.createRequire can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note th...
New Financial Malware 'JanelaRAT' Targets Latin American Users
Users in Latin America LATAM are the target of a financial malware called JanelaRAT that's capable of capturing sensitive information from compromised Microsoft Windows systems. "JanelaRAT mainly targets financial and cryptocurrency data from LATAM bank and financial institutions," Zscaler...
PT-2023-15937 · WordPress · Elementor Website Builder
Name of the Vulnerable Software and Affected Versions: Elementor Website Builder WordPress plugin versions prior to 3.5.5 Description: The issue allows user-controlled URLs to be loaded into the DOM without proper filtering. This could be exploited to inject rogue iframes that point to malicious...
AZL-27943 CVE-2023-3824 affecting package php for versions less than 8.1.22-1
In PHP version 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE...
DEBIAN-CVE-2023-3824
In PHP version 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE...
CVE-2023-3823 Security issue with external entity loading in XML without enabling it
In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling...
CVE-2023-37511
If certain App Transport Security ATS settings are set in a certain manner, insecure loading of web content can be achieved...
CVE-2023-37511
If certain App Transport Security ATS settings are set in a certain manner, insecure loading of web content can be achieved...
CVE-2023-37511
The CVE refers to an information disclosure vulnerability in HCL Traveler To Do (the iOS/iPadOS companion for HCL Notes To Do) caused by a flaw in App Transport Security (ATS) settings, enabling insecure loading of web content. Multiple sources (CNVD/CNNVD/CVE records) describe the issue as stemm...
PHP Code Issues Vulnerabilities
PHP is a scripting language for PHP that executes on the server side. PHP suffers from a code issue vulnerability that stems from loading external entities without XML enabled, resulting in a local file disclosure. Affected products and versions: PHP version 8.0 prior to 8.0.30, version 8.1 prior...
PT-2023-26003
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue concerns App Transport Security ATS settings being configured in a way that allows for insecure loading of web content. Recommendations At the...
CVE-2023-37511: Undefined Security Weakness
If certain App Transport Security ATS settings are set in a certain manner, insecure loading of web content can be achieved...
CLSA-2023-1691576279 Fix CVE(s): CVE-2023-38408
SECURITY UPDATE: helper programs can dlopen/dlclose any libraries from /usr/lib - debian/patches/CVE-2023-38408-Ensure-FIDO-PKCS11-libraries-contain-expect.patch: checks libraries before dlopen - debian/patches/CVE-2023-38408-Separate-ssh-pkcs11-helpers-for-each-p11-mo.patch: separate...
CVE-2023-24015 Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2
A partial DoS vulnerability has been detected in the Reports section, exploitable by a malicious authenticated user forcing a report to be saved with its name set as null. The reports section will be partially unavailable for all later attempts to use it, with the report list seemingly stuck on...