16956 matches found
PT-2023-6007 · Fortinet · Fortimanager
Name of the Vulnerable Software and Affected Versions: FortiManager versions 6.0 through 7.2.2 Description: The issue is related to improper access control in the FortiManager management interface. This can allow a remote and authenticated attacker with at least "device management" permission on...
PT-2023-29255 · Andres Felipe Perea V · Copyrightpro
Name of the Vulnerable Software and Affected Versions: Andres Felipe Perea V. CopyRightPro plugin versions = 2.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions o...
CVE-2023-44487
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
The vulnerability of Acronis Cyber Protect 15’s data protection software lies in its insufficient protection of registration data, allowing attackers to gain unauthorized access to the protected information.
The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow unauthorized attackers to gain unauthorized access to protected information...
Policy Enforcement Bypass
chromium is vulnerable to .The vulnerability arises from insufficient policy enforcement in the Downloads component of the library, enabling an attacker to bypass enterprise policy restrictions through a crafted download...
CVE-2023-44821
Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...
CVE-2023-39928
A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability...
BELL-CVE-2023-42445
Bulletin has no description...
Denial Of Service (DoS)
libjson-c.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a buffer overflow because the sizet variable is not properly validated which allows an attacker to cause an application crash by entering a value that overflows the int type...
PT-2023-29130 · Unknown · Checkfront Online Booking System
Name of the Vulnerable Software and Affected Versions: Checkfront Online Booking System plugin versions = 3.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...
PT-2023-22213 · WordPress · Fugu Maintenance Switch
Name of the Vulnerable Software and Affected Versions: Fugu Maintenance Switch plugin versions = 1.5.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
PT-2023-5799 · Acronis · Acronis Cyber Protect 16 +2
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent versions prior to build 35895 Acronis Cyber Protect 16 versions prior to build 37391 Acronis Agent versions prior to build 35895 Description: The issue is related to errors in authorization, which may allow a...
Puppet Bolt Security Vulnerability
Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the United States, which can be used to manage configuration files, users, cron tasks, packages, system services, and so on. A security vulnerability exists in Puppet Bolt versions prior ...
Puppet Bolt privilege escalation vulnerability
In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified...
BELL-CVE-2023-39323
Bulletin has no description...
CVE-2023-39323 Arbitrary code execution during build via line directives in cmd/go
Line directives "//line" can be used to bypass the restrictions on "//go:cgo" directives, allowing blocked linker and compiler flags to be passed during compilation. This can result in unexpected execution of arbitrary code when running "go build". The line directive requires the absolute path of...
BELL-CVE-2023-40745
Bulletin has no description...
BELL-CVE-2023-42754
Bulletin has no description...