16956 matches found
PT-2023-6998 · Siemens · Simatic Pcs Neo
Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions prior to V4.1 Description: The issue is related to a lack of authentication for a critical function in the administrative console of the SIMATIC PCS neo web system management technology process. This could allow a...
PT-2023-14221 · Intel · Intel Unison
Name of the Vulnerable Software and Affected Versions: Intel Unison affected versions not specified Description: The issue is related to incomplete cleanup in Intel Unison software, which may allow an authenticated user to potentially enable information disclosure via local access. Recommendation...
Intel NUC Software Security Vulnerability
Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in Intel NUC Software. An attacker exploiting this vulnerability could cause elevation of privilege, denial of service, and information disclosure...
PT-2023-29806 · Unknown · Phpgurukul Teacher Subject Allocation Management System
Name of the Vulnerable Software and Affected Versions: phpgurukul Teacher Subject Allocation Management System version 1.0 Description: The issue allows attackers to execute arbitrary SQL commands and obtain sensitive information. This is achieved via the searchdata parameter in the "index.php"...
PT-2023-23699 · Intel · Intel On Demand
Name of the Vulnerable Software and Affected Versions: IntelR On Demand software versions prior to 1.16.2 IntelR On Demand software versions prior to 2.1.1 IntelR On Demand software versions prior to 3.1.0 Description: The issue involves the insertion of sensitive information into a log file in...
Intel® In-Band Manageability Software Advisory
Summary: A potential security vulnerability in some Intel® In-Band Manageability software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-41689 Description: Improper access control in some Inte...
OSV-2023-1147 Heap-buffer-overflow in parse_by_block_type
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64114 Crash type: Heap-buffer-overflow READ Crash state: parsebyblocktype lightreadrecord lightgetnextpacket...
PT-2023-30477 · Unknown · Category Posts Widget
Name of the Vulnerable Software and Affected Versions: Category Post List Widget versions n/a through 2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in the Category Post List Widget. Recommendations: For versions n/a through 2....
PT-2023-30554 · Cozmoslabs · Cozmoslabs Profile Builder
Name of the Vulnerable Software and Affected Versions: Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin versions prior to 3.10.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of...
CVE-2023-5543 Moodle: duplicating a bigbluebutton activity assigns the same meeting id
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting...
CVE-2023-5542 Moodle: students can view other users in "only see own membership" groups
Students in "Only see own membership" groups could see other students in the group, which should be hidden...
CVE-2023-39335 - Certificate creation authentication bypass in UPDATEPROFILE handler
Created Date Nov 9, 2023 4:55:50 PM...
CVE-2023-39337 - MobileConfig profile download authentication bypass
Created Date Nov 9, 2023 4:55:41 PM...
CVE-2023-47110 Any value can be changed in the configuration table by an employee having access to block reassurance module
blockreassurance adds an information block aimed at offering helpful information to reassure customers that their store is trustworthy. An ajax function in module blockreassurance allows modifying any value in the configuration table. This vulnerability has been patched in version 5.1.4...
CVE-2023-4218
CVE-2023-4218 is an XXE vulnerability in Eclipse IDE
BELL-CVE-2023-39198
Bulletin has no description...
PT-2023-23144 · Unknown · Faraz Quazi Floating Action Button
Name of the Vulnerable Software and Affected Versions: Faraz Quazi Floating Action Button plugin versions 1.2.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintende...
OSV-2023-1126 Heap-buffer-overflow in iasecc_parse_acls
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63949 Crash type: Heap-buffer-overflow READ 1 Crash state: iaseccparseacls iaseccparsedocp iaseccsdoparsedata...
Arbitrary Code Injection
quartz-jobs is vulnerable to Arbitrary code injection. The vulnerability is due to lack of message validation in the SendQueueMessageJob.execute method, which can lead to remote code execution...