PT-2023-6730

Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 and prior Description The issue is related to an out-of-bounds write vulnerability in the translationVectors parsing functionality of Open Babel, which can be exploited by a remote attacker using a specially crafted...

The vulnerability of the Copyparty file server arises from errors in processing the relative path to the restricted access directory. This allows a perpetrator to gain read, modify, or delete access to data.

The vulnerability of the Copyparty server is related to errors in processing the relative path to the /.cpr directory http://localhost:3923/.cpr/. This limited access can allow a malicious actor to gain read, modify, or delete privileges...

Denial Of Service (DoS)

github.com/hamba/avro is vulnerable to Denial Of Service DoS. The vulnerability exists in the ReadString function of reader.go because config.go does not properly restrict the maximum size of bytes and string types, allowing an attacker to cause an application crash by providing a maliciously...

PT-2023-9328 · Google +2 · Skia +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.98 Description: The issue is related to an inappropriate implementation in the Skia graphics library of Google Chrome, which can be exploited by a remote attacker to potentially perform a sandbox...

CVE-2023-35069

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bullwark allows Path Traversal. This issue affects Bullwark: before BLW-2016E-960H...

CVE-2023-35069

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bullwark allows Path Traversal. This issue affects Bullwark: before BLW-2016E-960H...

CVE-2023-35069

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bullwark allows Path Traversal.This issue affects Bullwark: before BLW-2016E-960H...

CVE-2023-34136

Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

CVE-2023-34131

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unauthenticated attacker to access restricted web pages. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

CVE-2023-34136

Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

CVE-2023-34136

Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

SonicWALL Analytics和GMS 安全漏洞

SonicWALL Analytics and SonicWALL GMS are both products of SonicWALL, Inc. of the U.S. SonicWALL Analytics is a high-performance management and reporting engine for the Web.SonicWALL GMS is a global management system. A powerful and intuitive solution for organizations, distributed enterprises an...

SonicWALL Analytics和GMS 代码问题漏洞

SonicWALL Analytics and SonicWALL GMS are both products of SonicWALL, Inc. of the U.S. SonicWALL Analytics is a high-performance management and reporting engine for the Web.SonicWALL GMS is a global management system. A powerful and intuitive solution for organizations, distributed enterprises an...

PT-2023-3806 · Sonicwall · Sonicwall Gms +1

Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.2-SP1 and earlier SonicWall Analytics versions 2.5.0.4-R7 and earlier Description: The issue is related to the exposure of sensitive information to unauthorized actors in SonicWall GMS and Analytics, allowing an...

DEBIAN-CVE-2023-37271

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

CVE-2023-37271

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

Path traversal

An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-23 in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the...

SAP NetWeaver 路径遍历漏洞

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A path traversal vulnerability exists in SAP NetWeaver, which results from the program failing to properl...

PT-2023-3966 · Fortinet · Fortiextender

Name of the Vulnerable Software and Affected Versions: FortiExtender versions 3.2.1 through 3.2.3 FortiExtender versions 3.3.0 through 3.3.2 FortiExtender versions 4.0.0 through 4.0.2 FortiExtender versions 4.1.1 through 4.1.8 FortiExtender versions 4.2.0 through 4.2.4 FortiExtender versions 5.3...

PT-2023-25743 · Unknown · Phpgurukul Online Security Guards Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Security Guards Hiring System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted payload to the "search booking box" API endpoint. This is a Cross-Site Scripting XSS issue, which mean...