1782 matches found
Authorization Bypass
gitlab is vulnerable to Authorization Bypasses. This vulnerability occurs due to a flaw in the way that GitLab handles Jira Connect Namespaces. An attacker can exploit this vulnerability to add or remove Jira Connect Namespaces, even if they do not have the required permissions. This can be used ...
PT-2023-11625 · Jinfornet · Jsreport
Name of the Vulnerable Software and Affected Versions: Jinfornet Jreport version 15.6 Description: A directory traversal issue allows unauthenticated attackers to gain sensitive information. Recommendations: For Jinfornet Jreport version 15.6, update to a version that fixes this issue, as no...
CVE-2023-20593
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information...
Amazon Linux 2 : containerd (ALASECS-2023-002)
The version of containerd installed on the remote host is prior to 1.6.19-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2023-002 advisory. containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can...
Buffer Overflow
libsox.so is vulnerable to Buffer Overflows. The vulnerability exists in the startread function at hcom.c due to not handling the buffer size which allows an attacker to cause an application crash or gain access to sensitive information...
CVE-2023-31822: Missing Encryption of Sensitive Data
An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Entetsu Store function...
Google Android Framework Information Disclosure Vulnerability (CNVD-2023-60904)
Google Android is a Linux-based open source operating system from Google. An information disclosure vulnerability exists in Google Android Framework, which can be exploited by attackers to obtain sensitive information...
PT-2023-23694 · Enphase · Enphase Installer Toolkit
Name of the Vulnerable Software and Affected Versions: Enphase Installer Toolkit version 3.27.0 Description: The issue concerns hard-coded credentials embedded in the binary code of the Android application. An attacker can exploit this to gain access to sensitive information. Recommendations: For...
CVE-2020-20919: Unrestricted Upload of File with Dangerous Type
File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensitive information via the theme.php file...
ROS-20230616-08
The npm package manager vulnerability is related to the npm package ignoring the file exclusion directives .gitignore and .npmignore root-level file exclusions when run in a workspace or with the workspace flag e.g., --workspaces, --workspace=. Exploitation of the vulnerability could allow an...
CVE-2020-19028: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive information via the /admin/plugin.php function...
Insecure Permissions
powerjob-server-starter is vulnerable to Insecure Permissions. The vulnerability exists because the library uses incorrect default permissions, which allows an attacker to gain sensitive information through the list job interface...
PT-2023-22449 · Teslamate · Teslamate
Name of the Vulnerable Software and Affected Versions: Teslamate version 1.27.1 Description: An issue in Teslamate allows attackers to obtain sensitive information via directly accessing the teslamate link. Recommendations: For Teslamate version 1.27.1, at the moment, there is no information abou...
Security Bulletin: Open Source Dependency Vulnerability
Summary IBM Edge Application Manager 4.5 has resolved the vulnerability. Vulnerability Details CVEID:CVE-2021-41190 DESCRIPTION: Open Container Initiative Distribution Specification could allow a remote authenticated attacker to bypass security restrictions, caused by a flaw when a Content-Type...
USN-6073-5 nova regression
USN-6073-3 fixed a vulnerability in Nova. The update introduced a regression causing Nova to be unable to detach volumes from instances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jan Wasilewski and Gorka Eguileor discovered that Nova incorrectly...
Ubuntu: Security Advisory (USN-6073-4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-30243: Improper Neutralization of Special Elements used in an SQL Command
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...
Hardcoded credentials
The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded credentials for the accompanying Apache Solr instance. This issue could allow attackers to login to the Solr dashboard with admin privileges and access sensitive information...
PT-2023-14027 · Ibm · Ibm Spectrum Scale
Name of the Vulnerable Software and Affected Versions: IBM Spectrum Scale versions 5.1.2.1 through 5.1.6.0 Description: The issue allows programs running inside the container to overcome the isolation mechanism, potentially gaining additional capabilities or accessing sensitive information on the...
