534 matches found
SUSE CVE-2020-14672
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...
PT-2023-8572 · N Able · N-Able Passportal Extension
Name of the Vulnerable Software and Affected Versions: N-able PassPortal extension versions prior to 3.29.2 for Chrome Description: The issue is related to insufficient protection of registration data, which may allow an attacker to gain unauthorized access to protected information. The N-able...
PT-2023-8680 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.6.4 Description: The issue is related to an authentication problem in the macOS operating system, specifically with the LoginWindow component. It is caused by inadequate authentication procedures, which can be...
CVE-2023-4601
A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and a...
DEBIAN-CVE-2023-5595
Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV...
Zephyr Security Breach
Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which stems from a buffer overflow vulnerability in component /subsys/net/l2/wifi/wiishell.c. The vulnerability is caused by a buffer...
DRUPAL-CONTRIB-2023-048
This module enables users to log in by email address with minimal configurations. Drupal core contains protection against brute force attacks via a flood control mechanism. This module's functionality did not replicate the flood control, enabling brute force attacks. A previous security advisory,...
CVE-2023-39150
ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execution. This is related to an incomplete fix for CVE-2022-46387...
GPAC 代码问题漏洞
GPAC is an open source multimedia framework. A code issue vulnerability exists in versions prior to GPAC 2.3-DEV that stems from the presence of a NULL pointer dereference...
Agile Approach to Mass Cloud Credential Harvesting and Crypto Mining Sprints Ahead
Developers are not the only people who have adopted the agile methodology for their development processes. From 2023-06-15 to 2023-07-11, Permiso Security's p0 Labs team identified and tracked an attacker developing and deploying eight 8 incremental iterations of their credential harvesting malwa...
PT-2023-13657 · Gitea +1 · Gitea +1
Name of the Vulnerable Software and Affected Versions: Gitea versions prior to 1.17.2 Description: The issue allows repo cloning to occur in the migration function. Recommendations: For versions prior to 1.17.2, update to version 1.17.2 or later to resolve the issue...
Mitsubishi Electric GOT2000 and GOT SIMPLE
1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: GOT2000 Series and GOT SIMPLE Series Vulnerability: Predictable Exact Value from Previous Values 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker...
Bullwark Momentum Series 路径遍历漏洞
The Bullwark Momentum Series is a series of surveillance devices. A path traversal vulnerability exists in previous versions of the Bullwark Momentum Series BLW-2016E-960H, which stems from vulnerability to path traversal attacks...
CVE-2023-37954
A cross-site request forgery CSRF vulnerability in Jenkins Rebuilder Plugin 320.v5a0933ae7d61 and earlier allows attackers to rebuild a previous build...
pypdf 安全漏洞
PyPDF2 is a free open source pure python PDF library . Able to split, merge, crop and convert pages of PDF files. pypdf 1.27.9 previous version of a security vulnerability , the vulnerability stems from the attacker can make PDF lead to unexpected long run , will block the process...
Siemens Totally Integrated Automation Portal Protection Mechanism Failure Vulnerability
The Totally Integrated Automation Portal is a PC software that offers the full range of Siemens digital automation services, from digital planning and integrated engineering to transparent operation. A protection mechanism failure vulnerability exists in Siemens Totally Integrated Automation...
Siemens TIA Portal 安全漏洞
The Totally Integrated Automation Portal is a PC software that offers the full range of Siemens digital automation services, from digital planning and integrated engineering to transparent operation. A protection mechanism failure vulnerability exists in Siemens Totally Integrated Automation...
Siemens TIA Portal
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
cpp-httplib 注入漏洞
cpp-httplib is an HTTP/HTTPS server and client library written in C++. A security vulnerability exists in cpp-httplib versions prior to 0.12.4 that stems from vulnerability to CRLF injection, which can lead to logic errors and other misbehavior...