Design/Logic Flaw

The WP EXtra plugin for WordPress is vulnerable to unauthorized access to restricted functionality due to a missing capability check on the 'test-email' section of the register function in versions up to, and including, 6.2. This makes it possible for authenticated attackers, with minimal...

CVE-2023-5314 WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending

The WP EXtra plugin for WordPress is vulnerable to unauthorized access to restricted functionality due to a missing capability check on the 'test-email' section of the register function in versions up to, and including, 6.2. This makes it possible for authenticated attackers, with minimal...

The vulnerability of the microprogramming-based power supply systems of Galaxy VL and Galaxy VS lies in the improper limitation of the path name to the restricted access catalog. This allows attackers to load arbitrary files into the system.

The vulnerability of the microprogramming-based power supply systems of Galaxy VL and Galaxy VS is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to load arbitrary files into the system...

The vulnerability of the Microsoft .NET Framework software, related to security configuration errors, allows a perpetrator to gain access to the hidden parts of a web application.

The vulnerability of the Microsoft.NET Framework is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to restricted parts of a web application by sending a specially crafted request...

The vulnerability of the Java library for supporting SSH protocols, Apache SSHD, arises due to an incorrect pathname limitation for the restricted access directory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Java library for supporting SSH protocols, Apache SSHD, is related to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Amazon Linux 2 : docker (ALASECS-2023-028)

The version of docker installed on the remote host is prior to 20.10.7-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2023-028 advisory. A file permissions vulnerability was found in Moby Docker Engine. Copying files by using into a specially-crafted...

CVE-2023-39246

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary...

CVE-2023-39246

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary...

Design/Logic Flaw

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary...

CVE-2023-39246

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary...

The vulnerability of open-source software for managing external resources like Terraform arises from incorrect restrictions on the path to the restricted directory. This allows attackers to load arbitrary files.

The vulnerability of open-source software for managing external resources like Terraform is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to load arbitrary files...

PT-2023-6967

Name of the Vulnerable Software and Affected Versions ASP.NET affected versions not specified Description The issue is related to errors in security settings of the Microsoft .NET Framework platform. It allows a remote attacker to access a closed part of a web application by sending a specially...

PT-2023-7287 · Unknown · Weston Embedded Uc-Http

Name of the Vulnerable Software and Affected Versions: Weston Embedded uC-HTTP version 3.01.01 Description: A heap-based buffer overflow vulnerability exists in the HTTP Server functionality. This issue can be triggered by a specially crafted set of network packets, potentially leading to arbitra...

Siemens Comos 安全漏洞

COMOS is a unified data platform for collaborative plant design, operations and management that supports the collection, processing, preservation and distribution of information throughout the plant lifecycle. An access control error vulnerability exists in Siemens COMOS, which could be exploited...

Information Disclosure

moodle/moodle is vulnerable to Information Disclosure. The vulnerability exists because the user information are not properly restricted which allows an attacker to gain access to sensitive information such as usernames...

The vulnerability of FortiWeb web applications’ network firewalls arises from incorrect pathname restrictions for access to restricted catalogs. This allows attackers to disclose protected information.

The vulnerability of FortiWeb web applications’ network firewalls exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information through specially crafted web requests...

PT-2023-27795 · Samsung · Modem 5123 +15

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem versions Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123 Description: A buffer copy issue,...

PT-2023-7019 · Google +1 · Chromedriver +1

Name of the Vulnerable Software and Affected Versions: chromedriver versions prior to 119.0.1 Description: The issue arises from a Command Injection vulnerability when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious...

FreeBSD Security Vulnerabilities

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD versions 13-RELEASE up to and including 13-RELEASE-p5, which stems from allowing applications to resolve previously restricted domain names...

SecuriDropper: New Android Dropper-as-a-Service Bypasses Google's Defenses

Cybersecurity researchers have shed light on a new dropper-as-a-service DaaS for Android called SecuriDropper that bypasses new security restrictions imposed by Google and delivers the malware. Dropper malware on Android is designed to function as a conduit to install a payload on a compromised...