13092 matches found
CVE-2023-22045 vulnerabilities
Vulnerabilities for packages: openjdk-11-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-26-openj9, openjdk, openjdk-25-openj9...
CVE-2023-22044 vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2023-22006 vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2023-21950 vulnerabilities
Vulnerabilities for packages: mysql...
SUSE-SU-2023:2870-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2023-3195: Fixed stack overflow in coders/tiff.c while parsing malicious tiff file bsc1212235...
WordPress Advanced Product Sample for WooCommerce Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Software Advanced Product Sample for WooCommerce Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e327e9294a5c Credits Rafie...
WordPress Easy Courses Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Software Easy Courses Type Plugin Vulnerable versions = 1.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e3ad0b50099b Credits Rafie Muhammad Patchstack Required...
Oracle Critical Patch Update Advisory - July 2023
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...
CVE-2023-37770
faust commit ee39a19 was discovered to contain a stack overflow via the component boxppShared::print at /boxes/ppbox.cpp...
MAL-2023-805 Malicious code in sssssssignalr-temp-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cc23bf354e5520194687388c9f9fedf32c28fbdd1bdaeb8abb7a0b1943f352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-3692 Unrestricted Upload of File with Dangerous Type in admidio/admidio
Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10...
CVE-2023-3444 Incorrect Authorization in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to merge arbitrary code into protected branches...
GHSA-M9JJ-P947-M8XV Jenkins mabl Plugin missing permission check
Jenkins mabl Plugin 0.0.46 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in...
iprange may panic when parsing ranges with invalid masks
Parsing a range with a mask larger than 32 bits causes a panic...
PYSEC-2023-116
xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...
BELL-CVE-2023-3269
Bulletin has no description...
PT-2023-3475 · Siemens · Simatic Cn 4100
Name of the Vulnerable Software and Affected Versions: SIMATIC CN 4100 versions prior to V2.5 Description: The issue is related to errors in access management, specifically improper access controls in configuration files, which can lead to privilege escalation. An attacker, acting remotely, could...
DSA-5451-1 thunderbird - security update
Bulletin has no description...