CVE-2023-27893

CVE-2023-27893 affects SAP Solution Manager and ABAP managed systems (ST-PI) with vulnerable interface exposure. A user with non-administrative role and standard remote-execution authorization can trigger an application function to perform actions outside their permissions, potentially reading or...

CVE-2023-25617

SAP Business Objects Adaptive Job Server (BI launchpad/Central Management Console or public Java SDK-based apps) versions 420 and 430 are vulnerable to OS command execution via remote command invocation when program objects execution is enabled. The issue allows authenticated users with schedulin...

Microsoft PostScript Printer Driver 安全漏洞

Microsoft PostScript Printer Driver is a Microsoft standard printer driver for PostScript printers from Microsoft.Microsoft PCL6 Class Printer Driver is a printer driver from Microsoft. Microsoft PCL6 Class Printer Driver is a printer driver software from Microsoft. A remote code execution...

SAP Solution Manager 代码注入漏洞

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

SAP Business Objects 操作系统命令注入漏洞

SAP Business Objects is a business intelligence suite from SAP, a German company. An operating system command injection vulnerability exists in SAP Business Objects versions 420 and 430, which originates from allowing arbitrary commands to be executed remotely on Unix when program object executio...

Microsoft PostScript Printer Driver 安全漏洞

Microsoft PostScript Printer Driver is a Microsoft standard printer driver for PostScript printers from Microsoft USA. Microsoft PCL6 Class Printer Driver is a printer driver software from Microsoft Corporation. Microsoft PostScript and PCL6 Class Printer Driver is a remote code execution...

PT-2023-1759 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PCL6 Printer Driver for Windows operating systems. This allows a remote attacker to...

Debian: Security Advisory (DLA-125-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ClamAV < 0.103.8 / 0.104.x < 0.105.2 / 1.0.0 Multiple Vulnerabilities

According to its version, the ClamAV clamd antivirus daemon running on the remote host is prior to 0.103.8, 0.104.x prior to 0.105.2, or 1.0.0. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1...

Debian: Security Advisory (DSA-796-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5931-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advisory ROSA-SA-2023-2130

Software: git 1.8.3.1 OS: rosa-server79 packageevrstring: git-1.8.3.1-23 CVE-ID: CVE-2022-23521 BDU-ID: 2023-00499 CVE-Crit: CRITICAL CVE-DESC: A vulnerability in the attribute definition mechanism for the gitattributes paths of the Git distributed version control system is related to integer...

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS systems exists due to the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially created arguments...

The vulnerability of the goiscsi and gobrick libraries of the Dell Container Storage Module allows a perpetrator to execute arbitrary commands.

The vulnerability of the goiscsi and gobrick libraries in the Dell Container Storage Module system exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability in the trigger_referral.php script of the Gimmie Plugin allows a violator to execute arbitrary SQL queries.

The vulnerability in the triggerratethread.php script of the Gimmie Plugin is related to the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the manage_record.php web application used for creating medical certificates, the Medical Certificate Generator App, allows a violator to execute arbitrary SQL code.

The vulnerability of the managerecord.php web application used for creating medical certificates in the Medical Certificate Generator App is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code...

The vulnerability of the index3.php script in the Class and Exam Timetabling System allows a perpetrator to execute arbitrary SQL code.

The vulnerability of the index3.php script of the Class and Exam Timetabling System is related to the failure to protect the SQL query structure when processing the password parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

CVE-2023-1127

A flaw was found in Vim. A division by zero in the scrolldown function may lead to a denial of service, modified memory, and possibly remote execution...

CVE-2023-25363

A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely...

Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload Exploit

This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in Oracle Web Applications Desktop Integrator, as shipped with Oracle EBS versions 12.2.3 through to 12.2.11, in order to gain remote code execution as the oracle user. This module requires Metasploit:...