Lucene search
K

3385 matches found

CVE
CVE
added 2023/10/20 7:23 p.m.47 views

CVE-2023-46035

The CVE-2023-46035 issue affects the Ruby gem svg_optimizer (Fnando) v0.2.6, where an external XML entity (XXE) vulnerability is possible when optimizing untrusted SVG content due to default XXE handling in the code (svg_optimizer.rb). This can allow a remote attacker to escalate privileges by ex...

7.1AI score0.0142EPSS
Exploits0
OSV
OSV
added 2023/10/15 1:15 a.m.6 views

CVE-2023-45871

An issue was discovered in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU...

7.5CVSS7.9AI score
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/10/14 12:0 a.m.93 views

SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2023:4071-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4071-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. Th...

7.8CVSS6.7AI score0.01094EPSS
Exploits4References115
Citrix
Citrix
added 2023/10/12 12:0 a.m.17 views

Workspace error "Unable to add account with the given server URL"

After adding Gateway URL on Windows Workspace, we can see below error: -------- Unable to add account with the given server URL. Ensure that it is correct or enter your email address --------...

7.1AI score
Exploits0
CVE
CVE
added 2023/10/11 6:38 p.m.36 views

CVE-2023-35903

The IBM Security Verify Governance – Identity Manager (Virtual Appliance) is affected by CVE-2023-35903 due to improper file validation, enabling arbitrary file upload and related privilege escalation/sensitive information exposure. Affected systems are the Identity Manager virtual appliance comp...

7.2AI score
Exploits0
Citrix
Citrix
added 2023/10/11 12:0 a.m.9 views

Error "Unable to launch your application" When Launching Published Applications

Error "Unable to launch your application. Contact your help desk with the following information: Cannot connect to the Citrix XenApp server. The Network is down"When Launching Published Applications Through Citrix Gateway...

7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/10/11 12:0 a.m.36 views

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:4030-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4030-1 advisory. The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

7.8CVSS6.8AI score0.01094EPSS
Exploits3References40
Wolfi
Wolfi
added 2023/10/10 9:28 p.m.43 views

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, kaf, haproxy-ingress, frp, metacontroller, kubeflow-katib, wireguard-go, oauth2-proxy, prometheus-adapter, pulumi-language-java, newrelic-infrastructure-agent, scorecard, nri-prometheus, metrics-server, nodetaint, atlantis, cue, pulumi,...

5.8AI score
Exploits0
OSV
OSV
added 2023/10/10 2:15 p.m.18 views

AZL-31336 CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

7.5CVSS7.1AI score0.99999EPSS
Exploits19References1
OSV
OSV
added 2023/10/10 2:15 p.m.9 views

AZL-35038 CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

7.5CVSS6.8AI score0.99999EPSS
Exploits19References1
Tenable Nessus
Tenable Nessus
added 2023/10/06 12:0 a.m.19 views

SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:3988-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3988-1 advisory. The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were...

7.8CVSS7.7AI score0.12405EPSS
Exploits3References131
CVE
CVE
added 2023/10/05 5:17 a.m.57 views

CVE-2023-45023

The CVE-2023-45023 entry corresponds to a Broken Access Control in the TYPO3 extension femanager. Multiple connected sources (GHSA-93J4-V838-8767, OSV, Veracode, and FriendsOfPHP advisory) describe that femanager fails to check access permissions for the invitation component, allowing remote atta...

7.1AI score0.01077EPSS
Exploits0
CVE
CVE
added 2023/10/04 7:49 a.m.29 views

CVE-2023-24286

CVE-2023-24286 is documented across several feeds as a buffer overrun/overflow in the Mosaic puzzle component when processing a crafted save file. The exact affected package names/versions are not consistently enumerated in the provided sources; Ubuntu/Debian mentions Mosaic puzzle with a crafted...

7.1AI score
Exploits0
CVE
CVE
added 2023/10/04 7:49 a.m.29 views

CVE-2023-24285

CVE-2023-24285 involves a buffer overrun in the Netslide puzzle (sgt-puzzles) triggered by a crafted save file. Connected documents indicate Ubuntu/Debian advisories listing the Netslide puzzle as affected, with no details on patch availability or exact versions in the provided sources. Exploitat...

7.1AI score
Exploits0
Citrix
Citrix
added 2023/10/04 12:0 a.m.14 views

After upgrade to VDA 2308, users getting message "You'll need a new app to open this ctxgeoloc link"

After upgrading to VDA 2308, when a user logs on, they receive a windows message stating: "You'll need a new app to open this ctxgeoloc link"...

7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/09/27 12:0 a.m.44 views

Amazon Linux 2 : microvm-kernel (ALASMICROVM-KERNEL-4.14-2023-002)

The version of microvm-kernel installed on the remote host is prior to 4.14.246-199.474. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MICROVM-KERNEL-4.14-2023-002 advisory. A flaw was found in the Linux kernel's implementation of wireless drivers using the...

8.8CVSS6.5AI score0.00658EPSS
Exploits3References16
Citrix
Citrix
added 2023/09/26 12:0 a.m.10 views

Fail to print on Debian Client

Cannot print normally on the Debian Client. The printing failed on the Debian client, but the print operation is working fine on the Windows Client...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/09/22 12:0 a.m.42 views

Oracle Linux 7 : qemu (ELSA-2023-12834)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12834 advisory. - virtio-crypto: verify src&dst buffer length for sym request Zhenwei Pi Orabug: 35724113 CVE-2023-3180 - hw/scsi/lsi53c895a: Fix reentrancy issues in...

6.5CVSS7AI score0.00269EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/09/21 12:0 a.m.4 views

PT-2023-5659 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.6 macOS versions prior to 12.7 macOS versions prior to 14 tvOS versions prior to 17 iOS versions prior to 16.7 iOS versions prior to 17 iPadOS versions prior to 16.7 iPadOS versions prior to 17 watchOS versions prio...

5.5CVSS4.8AI score0.00349EPSS
Exploits0References23
Citrix
Citrix
added 2023/09/18 12:0 a.m.31 views

Mac Workspace error "This store doesn't exist. Please retry or contact support"

After plugging-in Gateway URL on Mac Workspace and entering credentials, Workspace prompt error "This store doesn't exist. Please retry or contact support"...

7.2AI score
Exploits0
Rows per page
Query Builder