CVE-2023-6006 Privilege Escalation Vulnerability

This vulnerability potentially allows local attackers to escalate privileges on affected installations of PaperCut NG. An attacker must have local write access to the C Drive. In addition, Print Archiving must be enabled or the attacker needs to encounter a misconfigured system. This vulnerabilit...

PT-2023-7086 · Ashlar Vellum · Ashlar-Vellum Xenon

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Xenon affected versions not specified Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Xenon. User interaction is required, as the target must visit a...

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

CISA Alerts: High-Severity SLP Vulnerability Now Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a high-severity flaw in the Service Location Protocol SLP to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. Tracked as CVE-2023-29552 CVSS score: 7.5, the issue relates to a...

PT-2023-9100 · Telit · Telit Cinterion Ehs5/6/8 +1

Name of the Vulnerable Software and Affected Versions: Telit Cinterion EHS5/6/8 affected versions not specified Telit Cinterion BGS5 affected versions not specified Telit Cinterion PDS5/6/8 affected versions not specified Description: A Buffer Copy without Checking Size of Input vulnerability...

PT-2023-12977 · Undefined · Undefined

Fletch Top Threat Alert: CVE-2023-29552: CISA Warns of Actively Exploited SLP Vulnerability - CVE-2023-29552 FletchScore = High/Mainstream CyberSecurity ThreatIntel InfoSec CVE-2023-29552 CVE-2022-29552 CVE-2021-21974 ESXiArgs https://t.co/8WOC7N9kT1...

Service Location Protocol (SLP) Denial-of-Service Vulnerability

The Service Location Protocol SLP contains a denial-of-service DoS vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service DoS attack with a significant amplification factor...

CVE-2023-5982

The UpdraftPlus: WordPress Backup & Migration Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.23.10. This is due to a lack of nonce validation and insufficient validation of the instanceid on the 'updraftmethod-googledrive-auth' acti...

kernel: Linux kernel: Memory leak in driver core location can lead to denial of service

A flaw was found in the Linux kernel. This memory leak vulnerability exists in the driver core location component, where the acpipldinfo structure is not properly freed upon allocation failure. A local attacker could exploit this flaw to cause a denial of service DoS due to resource exhaustion...

CVE-2023-42545

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data...

CVE-2023-42545

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data...

Design/Logic Flaw

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data...

CVE-2023-42545

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data...

CVE-2023-42545

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data...

CVE-2023-42545

Summary: CVE-2023-42545 concerns the Android Phone application using an implicit intent for sensitive communication, enabling potential access to location data. Affected software/versions (from provided details): Android 11 prior to 12.7.20.12; Android 12 includes 13.1.48 and 13.5.28; Android 13 ...

PT-2023-28412 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 12.7.20.12 in Android 11 Android versions 13.1.48 and 13.5.28 in Android 12 Android version 14.7.38 in Android 13 Description: The issue allows attackers to access location data due to the use of implicit intent for...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices, which stems from a vulnerability in the Phone module that uses implicit intent to handle sensitive...

CVE-2023-5969

Mattermost fails to properly sanitize the request to /api/v4/redirectlocation allowing an attacker, sending a specially crafted request to /api/v4/redirectlocation, to fill up the memory due to caching large items...

Rocky Linux 8 : thunderbird (RLSA-2021:5045)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:5045 advisory. - Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported...

Rocky Linux 8 : go-toolset:rhel8 (RLSA-2022:1819)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1819 advisory. - Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm...