11879 matches found
Afian FileRun security vulnerability
Afian FileRun is a full-featured web-based file manager. A security vulnerability exists in Afian FileRun that stems from a stored cross-site scripting vulnerability that allows an attacker to inject JavaScript code that executes when a user clicks on a carefully crafted shared link...
[SECURITY] Fedora 37 Update: motif-2.3.4-30.fc37
This is the Motif 2.3.4 run-time environment. It includes the Motif shared libraries, needed to run applications which are dynamically linked against Motif and the Motif Window Manager mwm...
CVE-2023-33107
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call...
Memory corruption
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call...
CVE-2023-33107 Integer Overflow or Wraparound in Graphics Linux
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call...
PT-2023-22025 · Filerun · Filerun
Name of the Vulnerable Software and Affected Versions: Filerun Update 20220202 Description: A Stored XSS issue in shared files download terms allows attackers to inject JavaScript code that is executed when a user follows the crafted share link. Recommendations: For Filerun Update 20220202,...
The vulnerability of the Private Key Handler component in the server that unlocks encrypted disks of Tang allows a hacker to disclose the protected information.
The vulnerability of the Private Key Handler component in the server that unlocks encrypted disks of the Tang service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
CVE-2023-26024
IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication. IBM X-Force ID: 247898...
PT-2023-7532 · Unknown · Metadatabase.Cpp
Name of the Vulnerable Software and Affected Versions: MetaDataBase.cpp affected versions not specified Description: The issue is related to a possible UAF Use After Free write due to a race condition in multiple functions of MetaDataBase.cpp. This could lead to remote escalation of privilege wit...
PT-2023-35615 · Hdf5 · Hdf5
Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the H5O shared decode and H5O dtype shared decode functions, as well as the H5O msg read oh...
Apache Storm Information Disclosure Vulnerability (CNVD-2023-9666324)
Apache Storm is the United States Apache Apache Foundation of a set of open source distributed real-time computing system developed using Clojure concurrent programming language. Apache Storm suffers from an information disclosure vulnerability that stems from a temporary directory shared among a...
The vulnerability of the software for protecting against Cisco Secure Endpoint Connector for Windows against malware lies in synchronization errors when using a shared resource (“Race Condition”), allowing a malicious actor to trigger a service failure.
The vulnerability of the Cisco Secure Endpoint Connector for Windows anti-virus software relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...
BackWPup < 4.0.2 - Authenticated (Administrator+) Directory Traversal
Description The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the Log File Folder. This allows authenticated attackers to store backups in arbitrary folders on the server provided they can be written to by the server. Additionally,...
Apache Storm 安全漏洞
Apache Storm is the United States Apache Apache Foundation of a set of open source distributed real-time computing system developed using Clojure concurrent programming language. Apache Storm suffers from an information disclosure vulnerability that stems from a temporary directory shared among a...
The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.
The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using a shared resource „Race Conditions“. Exploiting this vulnerability can allow an attacker to increase their privileges...
Cisco Anyconnect Secure Mobility Client Security Vulnerability
Cisco Anyconnect Secure Mobility Client is a VPN client software for secure connections from Cisco. A security vulnerability exists in the Cisco Anyconnect Secure Mobility Client, which can be exploited by an attacker by logging on to an affected device at the same time that another user is...
The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software relates to unauthorized access to shared data in a multi-threaded context, allowing attackers to gain increased privileges.
The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software is related to unsynchronized access to shared data in a multi-threaded context. Exploiting this vulnerability could allow an attacker operating remotely to enhance their privileges...
CLSA-2023-1700590886 kernel: Fix of 10 CVEs
openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - xen/blkfront: fix leaking data in shared pages CVE-2022-26365 - Bluetooth: Fix slab-out-of-bounds read in hciextendedinquiryresultevt CVE-2020-36386 - btrfs: only search for leftinfo if there is no rightinfo in trymergefreespace...
The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.
The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows operating system’s Search service allows a perpetrator to escalate their privileges.
The vulnerability of the Windows operating system’s Search service is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...