12844 matches found
CVE-2023-49131
A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 10. The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current...
Ruby on Rails: DoS with crafted "Range" header
The vulnerability was discovered in the Active Storage component of Ruby on Rails. The vulnerability allowed an attacker to craft a "Range" header that could lead to a Denial of Service DoS attack. The attack was possible due to the lack of validation on overlapping ranges in the...
IBM Storage Fusion Security Vulnerability
IBM Storage Fusion is a fully integrated platform from International Business Machines IBM for running and maintaining all native Red Hat OpenShift applications. A security vulnerability exists in IBM Storage Fusion HCI versions 2.1.0 through 2.6.1, which stems from the system containing hard-cod...
@clevercanyon/dev-deps (>=1.0.274, <=1.0.287), @flare-city/test (>=0.2.0, <=0.4.3) potentially affected by CVE-2023-7080 via wrangler (>=3.15.0, <=3.18.0)
wrangler NPM version =3.15.0, =1.0.274, =0.2.0, =0.4.3 Source cves: CVE-2023-7080 Source advisory: OSV:GHSA-F8MP-X433-5WPF...
CVE-2024-0201
creationtimestamp| type| source ---|---|--- 2024-01-03 11:26:12+00:00| seen| https://t.me/ctinow/162314 2024-01-04 01:35:29+00:00| seen| https://t.me/cibsecurity/74315 2024-01-23 14:56:39+00:00| seen| https://t.me/ctinow/172003...
Apache InLong code injection vulnerability
Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. A code injection vulnerability exists in Apache InLong versions 1.5.0 through 1.9.0, which stems from the presence of a code...
TOTOLINK EX1800T setNtpCfg Interface Command Execution Vulnerability
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T setNtpCfg interface. The vulnerability stems from the failure of the tz parameter of the setNtpCfg interface of cstecgi .cgi to properly filter...
TOTOLINK EX1800T setRptWizardCfg Interface Command Execution Vulnerability
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T setRptWizardCfg interface, which originates from the merge parameter of the cstecgi .cgi's setRptWizardCfg interface that fails to correctly filt...
TOTOLINK EX1800T setPasswordCfg Interface Command Execution Vulnerability
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T setPasswordCfg interface, which originates from the failure of the admuser parameter of the cstecgi .cgi's setPasswordCfg interface to correctly...
TOTOLINK EX1800T setRebootScheCfg Interface Command Execution Vulnerability
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T setRebootScheCfg interface. The vulnerability stems from the failure of the hour parameter of the setRebootScheCfg interface of cstecgi .cgi to...
TOTOLINK EX1800T langType Parameter Command Execution Vulnerability
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T langType parameter. An attacker can exploit this vulnerability to execute arbitrary commands on the system...
GO-2023-2394 Spoofed source IP address in github.com/shift72/caddy-geo-ip
The caddy-geo-ip aka GeoIP middleware for Caddy 2 allows attackers to spoof their source IP address via an X-Forwarded-For header, which may bypass a protection mechanism trustedproxy directive in reverseproxy or IP address range restrictions...
-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42435 more potentially affected by CVE-2023-26159 via follow-redirects (>=1.0.0, <=1.15.3)
follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2023-26159 Source advisory: OSV:GHSA-JCHW-25XP-JWWC...
CVE-2023-33110 Use of Out-of-range Pointer Offset in Audio
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption...
CVE-2023-33033 Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio during playback with speaker protection...
CVE-2023-33033: Use of Out-of-range Pointer Offset
Memory corruption in Audio during playback with speaker protection...
CVE-2023-52180
creationtimestamp| type| source ---|---|--- 2023-12-31 12:26:29+00:00| seen| https://t.me/ctinow/161069 2024-01-01 01:31:44+00:00| seen| https://t.me/cibsecurity/74064 2024-01-22 10:11:23+00:00| seen| https://t.me/ctinow/171068...
CVE-2023-44088
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pandora FMS on all allows SQL Injection. Arbitrary SQL queries were allowed to be executed using any account with low privileges. This issue affects Pandora FMS: from 700 through 774...
CVE-2023-32095
creationtimestamp| type| source ---|---|--- 2023-12-29 10:26:35+00:00| seen| https://t.me/ctinow/160400 2023-12-30 01:35:50+00:00| seen| https://t.me/cibsecurity/73915 2024-01-21 07:07:57+00:00| seen| https://t.me/ctinow/170754...
@58860ed6ffd9e897/gold-finger-extension (1.0.2), @airfleet/wordpress-dev (>=2.2.0, <=2.2.4) +271 more potentially affected by CVE-2023-52079 via msgpackr (>=1.2.9, <=1.10.0)
msgpackr NPM version =1.2.9, =2.2.0, =1.2.0, =0.3.0, =2.9.3, =2.3.0, =1.9.13, =0.84.3, =1.0.73, =1.0.73, =4.0.2-cmmn, =3.0.5, =1.0.55, =2.0.10 and more Source cves: CVE-2023-52079 Source advisory: OSV:GHSA-7HPJ-7HHX-2FGX...