CVE-2022-31643

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability...

CVE-2022-31643

Summary (mode C): CVE-2022-31643 concerns a BIOS-related vulnerability in HP PC products that may compromise system integrity. The affected component is the system BIOS on certain HP PC platforms, with the root cause described as a potential integrity loss if exploited. Practical impact is listed...

Buffer overflow

Qihoo 360 https://www.360.cn/ Qihoo 360 Safeguard https://www.360.cn/ Qihoo 360 Total Security http://www.360totalsecurity.com/ is affected by: Buffer Overflow. The impact is: execute arbitrary code local. The component is: This is a set of vulnerabilities affecting popular software, "360...

OESA-2023-1216 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A use-after-free flaw was found in btrfssearchslot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information leaCVE-2023-1611 A flaw use after free i...

Xxe

National land numerical information data conversion tool all versions improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

CVE-2023-26986

CVE-2023-26986 affects China Mobile OA Mailbox PC v2.9.23. A vulnerability in the mail component allows an attacker to cause arbitrary commands to run on a victim host when a user interacts with a crafted EML file sent to the OA mailbox. The CVSS base metrics in the entry indicate high impact to ...

PT-2023-20889 · China Mobile · China Mobile Oa Mailbox Pc

Name of the Vulnerable Software and Affected Versions: China Mobile OA Mailbox PC version 2.9.23 Description: An issue in China Mobile OA Mailbox PC allows remote attackers to execute arbitrary commands on a victim host via user interaction with a crafted EML file sent to their OA mailbox...

China Mobile OA Mailbox PC 安全漏洞

China Mobile OA Mailbox PC is a mailbox related application from China Mobile China. A security vulnerability exists in China Mobile OA Mailbox PC version v2.9.23, which can be exploited by an attacker to send a crafted EML file to a user's OA mailbox, and when the user clicks on the interaction,...

CVE-2023-26986

An issue in China Mobile OA Mailbox PC v2.9.23 allows remote attackers to execute arbitrary commands on a victim host via user interaction with a crafted EML file sent to their OA mailbox...

PostgreSQL 9.6.1 Remote Code Execution

Exploit Title: PostgreSQL 9.6.1 - Remote Code Execution RCE Authenticated Date: 2023-02-01 Exploit Author: Paulo Trindade @paulotrindadec, Bruno Stabelini @Bruno Stabelini, Diego Farias @fulcrum and Weslley Shaimon Github: https://github.com/paulotrindadec/CVE-2019-9193 Version: PostgreSQL 9.6.1 ...

JVN#75742861: Improper restriction of XML external entity references (XXE) in National land numerical information data conversion tool

National land numerical information data conversion tool provided by MLIT improperly restricts XML external entity references XXE CWE-611. Impact By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker. Solution Stop using the product The developer...

der-pc-anwender.de Cross Site Scripting vulnerability OBB-3244413

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-1670

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC-card Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

AZL-25900 CVE-2023-1670 affecting package hyperv-daemons for versions less than 5.15.107.1-1

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC-card Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

UBUNTU-CVE-2023-1670

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC-card Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

Design/Logic Flaw

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC-card Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

SUSE CVE-2023-1670

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA PC-card Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

CVE-2023-1670

CVE-2023-1670 is a Linux kernel issue affecting the Xircom 16-bit PCMCIA (PC-card) Ethernet driver, where a use-after-free in the xirc2ps_cs network driver can allow a local attacker to crash the system or potentially escalate privileges. The vulnerability is described in the initial CVE entry as...

pcexpansion.es Cross Site Scripting vulnerability OBB-3232210

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-22344

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336...