16956 matches found
CVE-2023-41117
An issue was discovered in EnterpriseDB Postgres Advanced Server EPAS before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contain packages, standalone packages, and functions that run SECURITY DEFINER but are inadequately secured against...
CVE-2023-49994
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c...
The vulnerability of function sub_417338 in the microprogramming software of the TOTOLINK X6000R router allows a hacker to execute arbitrary code.
The vulnerability of sub417338 in the microprogramming software of the TOTOLINK X6000R router is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2023-50463
The caddy-geo-ip aka GeoIP middleware through 0.6.0 for Caddy 2, when trustheader X-Forwarded-For is used, allows attackers to spoof their source IP address via an X-Forwarded-For header, which may bypass a protection mechanism trustedproxy directive in reverseproxy or IP address range restrictio...
Structured Content < 1.6 - Contributor+ PHP Object Injection
Description The plugin is vulnerable to PHP Object Injection via deserialization of untrusted input. This makes it possible for attackers, with contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable plugin. If a POP chain is present via an...
BELL-CVE-2023-6622
Bulletin has no description...
Denial Of Service (DoS)
libgpac.so is vulnerable to Denial of Service DoS. The vulnerability occurs due to a memory leak in the gfsgvrmlfieldpointerdel function of scenegraph/vrmltools.c, allowing remote attackers to cause denial of service conditions...
The vulnerability of microprogrammed software in Osprey Pump Controller controllers allows a intruder to alter arbitrary data or cause malfunctions during maintenance.
The vulnerability of microprogrammed software in Osprey Pump Controller controllers relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to alter arbitrary data or cause malfunctions in the system...
The vulnerability of microprogrammed software in Osprey Pump Controller controllers allows a intruder to gain unauthorized access to the device.
The vulnerability of the microprogrammed software of Osprey Pump Controller devices exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to the device...
The vulnerability of microprogrammed software in Osprey Pump Controller controllers allows a intruder to gain unauthorized access to the device.
The vulnerability of the microprogrammed software of Osprey Pump Controller controllers is related to insufficient entropy. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the device...
CVE-2023-48830
Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...
BELL-CVE-2023-45866
Bulletin has no description...
BELL-CVE-2023-46219
Bulletin has no description...
PT-2023-9073 · Oracle · Primavera P6 Enterprise Project Portfolio Management
Name of the Vulnerable Software and Affected Versions: Primavera P6 Enterprise Project Portfolio Management versions 19.12.0 through 19.12.22 Primavera P6 Enterprise Project Portfolio Management versions 20.12.0 through 20.12.21 Primavera P6 Enterprise Project Portfolio Management versions 21.12....
CVE-2023-49460
libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decodeuncompressedimage...
CVE-2023-49464
libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci...
BELL-CVE-2023-46751
Bulletin has no description...
BELL-CVE-2023-39326
Bulletin has no description...
The vulnerability of microprogrammed software in Osprey Pump Controller controllers, due to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary code.
The vulnerability of the microprogramming software of Osprey Pump Controller controllers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...