5592 matches found
Design/Logic Flaw
In the Splunk App for Lookup File Editing versions below 4.0.1, a user can insert potentially malicious JavaScript code into the app, which causes that code to run on the user’s machine. The app itself does not contain the potentially malicious JavaScript code. The vulnerability requires the...
CVE-2023-32714
CVE-2023-32714 describes a path traversal vulnerability in the Splunk App for Lookup File Editing versions below 4.0.1 . A low-privileged user can send a specially crafted web request to trigger traversal and gain read/write access to restricted areas of the Splunk installation directory. Impact ...
CVE-2023-32714 Path Traversal in Splunk App for Lookup File Editing
In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk installation directory...
CVE-2023-32715 Self Cross-Site Scripting (XSS) on Splunk App for Lookup File Editing
In the Splunk App for Lookup File Editing versions below 4.0.1, a user can insert potentially malicious JavaScript code into the app, which causes that code to run on the user’s machine. The app itself does not contain the potentially malicious JavaScript code. The vulnerability requires the...
CVE-2023-32715
CVE-2023-32715 affects Splunk App for Lookup File Editing versions before 4.0.1. The vulnerability is a reflected/Stored XSS scenario where a user can inject malicious JavaScript into the app, with the code executed in the victim’s browser. The underlying issue is that the app’s UI/output can be ...
CVE-2023-32715 Self Cross-Site Scripting (XSS) on Splunk App for Lookup File Editing
In the Splunk App for Lookup File Editing versions below 4.0.1, a user can insert potentially malicious JavaScript code into the app, which causes that code to run on the user’s machine. The app itself does not contain the potentially malicious JavaScript code. The vulnerability requires the...
PT-2023-7397 · Splunk · Splunk App For Lookup File Editing
Name of the Vulnerable Software and Affected Versions: Splunk App for Lookup File Editing versions prior to 4.0.1 Description: The issue allows a user to insert potentially malicious JavaScript code into the app, causing it to run on the user's machine. This does not require the app itself to...
CVE-2023-32715: Improper Neutralization of Input During Web Page Generation
In the Splunk App for Lookup File Editing versions below 4.0.1, a user can insert potentially malicious JavaScript code into the app, which causes that code to run on the user’s machine. The app itself does not contain the potentially malicious JavaScript code. The vulnerability requires the...
CVE-2023-32714: Path Traversal: '.../...//'
In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk installation directory...
PT-2023-8938 · Splunk · Splunk App For Lookup File Editing +1
Name of the Vulnerable Software and Affected Versions: Splunk App for Lookup File Editing versions prior to 4.0.1 Splunk Enterprise affected versions not specified Description: The issue is related to incorrect restriction of a directory path name with limited access. Exploitation may allow a...
PT-2023-35848 · Hdf5 · Hdf5
Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash state includes functions such as H5MM xstrdup, H5G ent to link, and H5G stab lookup cb. Recommendations: At the moment, there i...
hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5MM_xstrdup
Detailed Report: https://oss-fuzz.com/testcase?key=4910243449274368 Project: hdf5 Fuzzing Engine: afl Fuzz Target: h5extendedfuzzer Job Type: aflasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address: 0x612000027147 Crash State: H5MMxstrdup H5Genttolink H5Gstablookupcb...
AZL-26943 CVE-2023-33285 affecting package qt5-qtbase for versions less than 5.12.11-9
An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server...
DEBIAN-CVE-2023-33285
An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server...
PT-2023-35842 · Git +1 · Wireshark
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 6 crash has been reported. The crash involves the functions fragment addresses equal, g hash table lookup extended, and fragme...
PT-2023-4792
Name of the Vulnerable Software and Affected Versions iOS versions prior to 16.5 iPadOS versions prior to 16.5 watchOS versions prior to 9.5 macOS Ventura versions prior to 13.4 Description The issue allows photos belonging to the Hidden Photos Album to be viewed without authentication through...
Apple macOS Ventura 安全漏洞
Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.4, which stems from the fact that photos belonging to hidden albums can be viewed without authentication via Visual Lookup...
Linux Kernel ksmbd Multichannel Improper Authentication Session Hijack Vulnerability
This vulnerability allows remote attackers to hijack a session on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable. The specific flaw exists within the handling of Session ID within Multichanne...
kernel: Drivers: vmbus: Check for channel allocation before looking up relids
In the Linux kernel, the following vulnerability has been resolved: Drivers: vmbus: Check for channel allocation before looking up relids relid2channel assumes vmbus channel array to be allocated when called. However, in cases such as kdump/kexec, not all relids will be reset by the host. When th...
