16956 matches found
PT-2024-13069 · Apple · Macos Monterey +4
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS Sonoma versions prior to 14 macOS Ventura versions prior to 13.6 macOS Monterey versions prior to 12.7 Description: A path handling issue was addressed with improved validation. This...
PT-2023-26757 · Unknown · Youmart-Tokunaga
Name of the Vulnerable Software and Affected Versions: youmart-tokunaga version 13.6.1 Description: An information leak in the software allows attackers to obtain the channel access token and send crafted messages. Recommendations: For youmart-tokunaga version 13.6.1, at the moment, there is no...
PT-2023-36019 · Icu · Icu
Name of the Vulnerable Software and Affected Versions: icu 74 affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash indicate it occurs in the icu 74::SimpleDateFormat class, specifically in the subFormat, format,...
BELL-CVE-2023-38039
Bulletin has no description...
GHSA-V84F-6R39-CPFC HashiCorp Vault Improper Input Validation vulnerability
HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the...
CVE-2023-4980 Cross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...
PT-2023-30131
Name of the Vulnerable Software and Affected Versions Saphira Connect versions prior to 9 Description The issue is related to incorrect default permissions in Saphira Connect, allowing privilege escalation. Recommendations For versions prior to 9, update to version 9 or later to resolve the issue...
BELL-CVE-2023-25586
Bulletin has no description...
PT-2023-16825
Name of the Vulnerable Software and Affected Versions LibFoo versions 2.0 through 2.5 Description The issue allows attackers to execute arbitrary code with specific payloads, potentially leading to remote code execution vulnerabilities. This can result in system compromise. It is estimated that a...
The vulnerability of the Microsoft Visual Studio software development tool, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the set_dmvpn function in the Milesight UR32L router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the setdmvpn function in Milesight UR32L router microprogramming software arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
PT-2023-30292
Name of the Vulnerable Software and Affected Versions Digital Yepas versions prior to 1.0.1 Description The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in Digital Yepas, allowing authentication bypass. Recommendations For versions prior to 1.0.1,...
BELL-CVE-2023-3255
Bulletin has no description...
BELL-CVE-2023-4785
Bulletin has no description...
CVE-2023-39914
The CVE-2023-39914 vulnerability affects NLnet Labs’ bcder library up to version 0.7.2. The root cause is a panic during decoding of certain invalid input data, instead of rejecting it with an error. This can impact both the decoding stage and access to content of types that use delayed decoding....
Buffer Overflow
hutool is vulnerable to Buffer Overflow. The vulnerability is due to a lack of input validation in the jsonArray.add function. This can be exploited by an attacker who sends a specially crafted JSON object to trigger an OutOfMemoryError, potentially causing a crash or denial of service...
The vulnerability of D-Link DIR-605L router’s microprogramming software lies in the ability to write data beyond the buffer in memory, allowing a hacker to execute arbitrary code.
The vulnerability of D-Link DIR-605L router’s microprogramming software lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-39073
An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...