14711 matches found
PT-2023-14268 · Unknown · Eip Stack Group Opener
Name of the Vulnerable Software and Affected Versions: EIP Stack Group OpENer development commit 58ee13c Description: An out-of-bounds write issue exists in the GetAttributeList attribute count request functionality. A specially crafted EtherNet/IP request can lead to an out-of-bounds write,...
PT-2023-2921 · Cx-Drive · Cx-Drive
Name of the Vulnerable Software and Affected Versions: CX-Drive versions V3.01 and earlier Description: A heap-based buffer overflow issue exists, allowing arbitrary code execution and/or information disclosure when a user opens a specially crafted SDD file. Recommendations: For CX-Drive versions...
PT-2023-2329
Name of the Vulnerable Software and Affected Versions OpenSSH versions 8.9 through 9.2 Description The issue is related to the use of memory after it has been freed in the ssh-agent of OpenSSH, which can allow a remote attacker to impact the confidentiality, integrity, and availability of protect...
The vulnerability of the FortiOS operating systems arises from incorrect restrictions on path names to restricted directories, allowing attackers to read and write arbitrary files.
The vulnerability of the FortiOS operating systems is related to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability allows an attacker to read and write arbitrary files by executing commands in the command line interface...
PT-2023-2170 · Zoom · Zoom Client For It Admin
Name of the Vulnerable Software and Affected Versions: Zoom Client for IT Admin macOS installers versions prior to 5.13.5 Description: The issue is related to a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the...
PT-2023-1828 · Adobe · Substance3D - Stager
Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.0.0 and earlier Description: The issue is related to an out-of-bounds read operation in memory. Exploitation of this issue could allow an attacker to disclose sensitive information by using a specially...
PT-2023-20650 · Sap · Sap Content Server
Name of the Vulnerable Software and Affected Versions: SAP Content Server version 7.53 Description: The issue results from insufficient encoding of user-controlled inputs, leading to a Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some...
Atlassian Jira 7.7.0 < 7.13.9 Information Disclosure In Comment Restriction Feature
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.0. It is, therefore, affected by a vulnerability which permits remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment...
Atlassian Jira 7.13.0 < 7.6.17 Information Disclosure In Comment Restriction Feature
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.0. It is, therefore, affected by a vulnerability which permits remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment...
Atlassian Jira 8.0.0 < 8.4.2 Information Disclosure In Comment Restriction Feature
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.0. It is, therefore, affected by a vulnerability which permits remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment...
PT-2023-20196 · Sap · Sap Aba
Name of the Vulnerable Software and Affected Versions: SAP ABAP versions 751, 753, 754, 756, 757, 791 Description: The issue is caused by insufficient input sanitization, allowing an authenticated high privileged user to alter the current session of the user by injecting malicious database querie...
PT-2023-1882 · Unknown · Ruggedcom Crossbow
Name of the Vulnerable Software and Affected Versions: RUGGEDCOM CROSSBOW versions prior to V5.3 Description: A vulnerability has been identified in the audit log form of RUGGEDCOM CROSSBOW, which is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary...
PT-2023-12735
Name of the Vulnerable Software and Affected Versions Firmanet Software and Technology Customer Relation Manager versions prior to 2022.03.13 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows an...
PT-2023-1870 · Unknown · Igss Dashboard +2
Name of the Vulnerable Software and Affected Versions: IGSS Data Server versions V16.0.0.23040 and prior IGSS Dashboard versions V16.0.0.23040 and prior Custom Reports versions V16.0.0.23040 and prior Description: The issue is related to insufficient verification of data authenticity, which could...
PT-2023-12734
Name of the Vulnerable Software and Affected Versions Firmanet Software and Technology Customer Relation Manager versions prior to 2022.03.13 Description The issue is related to improper neutralization of input during web page generation, which allows Cross-Site Scripting XSS. This means an...
PT-2023-21048 · Sap · Sap Businessobjects Business Intelligence Platform
Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform Web Services versions 420, 430 Description: The issue allows an attacker to control a malicious BOE server, forcing the application server to connect to its own admintools. This results in a...
PT-2023-1872 · Unknown · Igss Dashboard +2
Name of the Vulnerable Software and Affected Versions: IGSS Data Server versions V16.0.0.23040 and prior IGSS Dashboard versions V16.0.0.23040 and prior Custom Reports versions V16.0.0.23040 and prior Description: The issue is related to insufficient verification of data authenticity, which could...
CVE-2023-1362
Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...
