10647 matches found
CVE-2023-25618 Denial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in an unused class for error handling in which an attacker authenticated as a non-administrative user can craft a request with...
CVE-2023-25618 Denial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in an unused class for error handling in which an attacker authenticated as a non-administrative user can craft a request with...
PT-2023-1944 · Adobe · Adobe Creative Cloud Desktop Application
Name of the Vulnerable Software and Affected Versions: Adobe Creative Cloud Desktop Application versions 5.9.1 and earlier Description: The issue is related to an untrusted search path in the application, which could allow an attacker to execute arbitrary code, access unauthorized data files, or...
[SECURITY] Fedora 38 Update: containernetworking-plugins-1.1.1-16.fc38
The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only with network connectivity of containers and removing allocated resource...
XML External Entity (XXE)
php-dompdf is vulnerable to XML External Entity XXE attacks. SVG images are not processed through Dompdf's resource validation logic, allowing attackers to use remote resources, local filesystem paths, and vulnerable protocols without restriction...
The vulnerability of the APC Easy UPS Online Monitoring Software lies in the improper assignment of permissions for critical resources, allowing attackers to increase their privileges.
The vulnerability of the APC Easy UPS Online Monitoring Software relates to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2023-27161
Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery SSRF via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request...
Server side request forgery (ssrf)
Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery SSRF via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request...
CVE-2023-27161
Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery SSRF via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request...
Jellyfin 代码问题漏洞
Jellyfin is a free software media system. Jellyfin suffers from an SSRF vulnerability that can be exploited by an attacker to access web resources and sensitive information via a crafted POST request...
CVE-2023-27161
Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery SSRF via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request...
Debian: Security Advisory (DLA-781-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GSD-2023-1002341 IB/hfi1: Restore allocated resources on failed copyout
IB/hfi1: Restore allocated resources on failed copyout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.12 by commit...
Amazon Linux 2 : curl (ALAS-2023-1986)
The version of curl installed on the remote host is prior to 7.88.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1986 advisory. A flaw was found in the Curl package, where the HSTS mechanism would be ignored by subsequent transfers when done on the sam...
Unauthorized read of Custom Resources
...
The vulnerability of BIOS microprogramming software in Dell laptops, related to the use of uninitialized resources, allows a hacker to execute arbitrary code.
The vulnerability of BIOS microprogramming software in Dell laptops relates to the use of an uninitialized resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Cloud Disk cloud storage solution for ASUS RT-AC68U router microprogramming software allows a hacker to write arbitrary files into the system.
The vulnerability of the Cloud Disk cloud storage solution for ASUS RT-AC68U router microprogramming software exists due to incomplete cleaning of temporary resources. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the system remotely...
FreeBSD : curl -- multiple vulnerabilities (be233fc6-bae7-11ed-a4fb-080027f5fec9)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the be233fc6-bae7-11ed-a4fb-080027f5fec9 advisory. - A cleartext transmission of sensitive information vulnerability exists in curl v7.88.0 that...
OPENSUSE-SU-2023:0063-1 Security update for opera
This update for opera fixes the following issues: Update to 96.0.4693.20 CHR-9191 Update Chromium on desktop-stable-110-4693 to 110.0.5481.78 CHR-9197 Update Chromium on desktop-stable-110-4693 to 110.0.5481.100 DNA-105308 Translations for O96 DNA-105395 Fix missing resources errors on About and...
