c-ares Heap Buffer Overflow DoS

The vulnerability of the aressetsortlist function in the asynchronous DNS query library c-ares is related to the lack of validation for the input string. This allows for a possible overflow of the stack of any length. Exploiting this vulnerability could enable an attacker to cause service failure...

Qibosoft QiboCMS SQL Injection Vulnerability

Qibosoft QiboCMS is an application software of China Qibo Software Qibosoft Company. A website builder CMS. A security vulnerability exists in Qibosoft QiboCMS v7, which originates from the GetTitle function in labelsetrs.php contains a Remote Code Execution RCE vulnerability...

FortiWeb Command Injection

The vulnerability of FortiWeb web applications’ network firewalls is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted...

Design/Logic Flaw

Minio is a Multi-Cloud Object Storage framework. Starting with RELEASE.2020-12-23T02-24-12Z and prior to RELEASE.2023-03-13T19-46-17Z, a user with consoleAdmin permissions can potentially create a user that matches the root credential accessKey. Once this user is created successfully, the root...

CVE-2023-27589 Minio vulnerable to denial of access by an admin privileged user for root credential

Minio is a Multi-Cloud Object Storage framework. Starting with RELEASE.2020-12-23T02-24-12Z and prior to RELEASE.2023-03-13T19-46-17Z, a user with consoleAdmin permissions can potentially create a user that matches the root credential accessKey. Once this user is created successfully, the root...

PT-2025-49648

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ALSA subsystem, specifically within the ca0132 driver. The tuning ctl set function may experience a buffer overrun when the loop does not break du...

Octopus Deploy security vulnerability

Octopus Deploy is an automation tool for .NET, Java, and other application development deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy Octopus Server that stems from the possibility of a user viewing a tag set without explicitly assigned permissions...

SQL Injection

modsecurity-crs:buster is vulnerable to SQL Injection attacks. An SQL injection bypass exists in OWASP ModSecurity Core Rule Set via ab where a is a special function name such as "if" and b is the SQL statement to be executed...

Sudo set_cmnd_path DoS

The vulnerability of the setcmndpath function in the Sudo system administration program is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2023-18495 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.5 Description: The issue is related to a Use After Free UAF vulnerability in the kernel subsystem function check permission for set tokenid. This vulnerability can be exploited by local attackers to escalate...

postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions

A flaw was found in org.postgresql. This issue allows the creation of a temporary file when using PreparedStatement.setTextint, InputStream and PreparedStatemet.setByteaint, InputStream. This could allow a user to create an unexpected file available to all users, which could end in unexpected...

PT-2023-21405 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.393 and earlier Jenkins LTS versions 2.375.3 and earlier Description: The issue arises when Jenkins creates a temporary file in the default temporary directory with default permissions for newly created files during plugin...

PT-2023-35449

Name of the Vulnerable Software and Affected Versions openvswitch versions prior to v5.10.169 Linux Kernel versions prior to v5.10.169 Description A possible memory leak was identified in the ovs meter cmd set function. The actual impact and attack plausibility have not yet been proven...

PT-2023-35380 · Unknown · Openvswitch

Name of the Vulnerable Software and Affected Versions: openvswitch versions prior to v6.1.13 Description: A potential memory leak issue exists in the ovs meter cmd set function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v6.1.13,...

GHSA-RMHG-2CVV-Q7VX dot-lens vulnerable to Prototype Pollution

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

dot-lens vulnerable to Prototype Pollution

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...