Incorrect Authorization

Overview UmbracoCms.Web is an ASP.NET CMS. Affected versions of this package are vulnerable to Incorrect Authorization due to improper authorization mechanism. An attacker with only send for approval permissions could exploit this weakness to publish content without the required publish...

CVE-2023-35622 Windows DNS Spoofing Vulnerability

...

Design/Logic Flaw

Umbraco is an ASP.NET content management system CMS. Starting in version 8.0.0 and prior to versions 8.18.10, 10.7.0, and 12.1.0, a user with access to a specific part of the backoffice is able to inject HTML code into a form where it is not intended. Versions 8.18.10, 10.7.0, and 12.1.0 contain ...

CVE-2023-38694 Umbraco CMS vulnerable to possible injection of HTML in an unintended form

Umbraco is an ASP.NET content management system CMS. Starting in version 8.0.0 and prior to versions 8.18.10, 10.7.0, and 12.1.0, a user with access to a specific part of the backoffice is able to inject HTML code into a form where it is not intended. Versions 8.18.10, 10.7.0, and 12.1.0 contain ...

GHSA-CRHP-7C74-CG4C Improper Input Validation in mindsdb

Impact The put method in mindsdb/mindsdb/api/http/namespaces/file.py does not validate the user-controlled name value, which is used in a temporary file name, which is afterwards opened for writing on lines 122-125, which leads to path injection. This issue may lead to arbitrary file write. This...

CVE-2023-42908

CVE-2023-42908 refers to multiple memory corruption issues fixed in macOS Sonoma 14.2. The vulnerability arises when processing maliciously crafted files and could lead to unexpected app termination or arbitrary code execution. Affected section in the public entries points to memory handling impr...

CVE-2023-5536

A feature in LXD LP1829071, affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password...

CVE-2023-32975 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

Design/Logic Flaw

An issue was discovered in Zimbra Collaboration ZCS before 10.0.3. An attacker can gain access to a Zimbra account. This is also fixed in 9.0.0 Patch 35 and 8.8.15 Patch 42...

CVE-2023-41106

An issue was discovered in Zimbra Collaboration ZCS before 10.0.3. An attacker can gain access to a Zimbra account. This is also fixed in 9.0.0 Patch 35 and 8.8.15 Patch 42...

Vite XSS vulnerability in `server.transformIndexHtml` via URL payload

Summary When Vite's HTML transformation is invoked manually via server.transformIndexHtml, the original request URL is passed in unmodified, and the html being transformed contains inline module scripts ..., it is possible to inject arbitrary HTML into the transformed output by supplying a...

Apache Struts Improper Control of Dynamically-Managed Code Resources vulnerability

When a Multipart request is performed but some of the fields exceed the maxStringLength limit, the upload files will remain in struts.multipart.saveDir even if the request has been denied. Users are recommended to upgrade to versions Struts 2.5.32 or 6.1.2.2 or Struts 6.3.0.1 or greater, which fi...

CVE-2023-49070

Pre-auth RCE in Apache Ofbiz 18.12.09. It’s due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are recommended to upgrade to version 18.12.10 Recent assessments: cbeek-r7 at January 03, 2024 8:34am UTC reported: CVE-2023-49070 is a critical...

CVE-2023-49280

The CVE-2023-49280 issue affects the XWiki Change Request extension. By default, Change Request can let a user edit any page and export changes as an XML file, which can leak password hashes when a user profile (or other password-containing document) is edited and the resulting XML is downloaded....

Security patch release - Ivanti Connect Secure 22.6R2 and 22.6R2.1

Last Modified Date Apr 18, 2024 5:20:53 PM...

CVE-2023-32870

CVE-2023-32870 affects the display drm module (MediaTek context from multiple sources). The vulnerability is caused by a missing bounds check, leading to an out-of-bounds read. Implications are local escalation of privilege with SYSTEM-level execution required; exploitation does not require user ...

CVE-2023-32869

The CVE-2023-32869 vulnerability is in the MediaTek Display DRM component and is caused by a missing bounds check, enabling an out-of-bounds write. This could allow local escalation of privilege with System execution privileges, and no user interaction is required for exploitation. Documents cons...

CVE-2023-32861

CVE-2023-32861 affects MediaTek devices with a flaw in the display module due to an incorrect bounds check, causing an out-of-bounds read that could enable local escalation of privileges with System execution privileges required. No user interaction is needed. Patch: ALPS08059081 (Issue ID: ALPS0...

CVE-2023-32854

CVE-2023-32854 affects MediaTek devices via the ril module, with an out-of-bounds write caused by a missing bounds check. This can enable local escalation of privileges to SYSTEM level without user interaction. Patch: ALPS08240132 (Issue ALPS08240132) is referenced as the remediation. No exploita...

CVE-2023-32848

CVE-2023-32848 affects MediaTek vdec (Video Decoder) with a type confusion that enables an out-of-bounds write. The described impact is local escalation of privilege requiring System execution privileges, with no user interaction needed. Public details confirm the vulnerability is tied to ALPS081...