CVE-2023-31167 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEL...

BELL-CVE-2023-0512

Bulletin has no description...

MAL-2023-7964 Malicious code in @manomano-internal/mf-seller-xp-commons-error-handlers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b03058857c2a1572c2cd9cbc4ba9791b96cf5db391f786f10c32dc6e7e91adf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Path traversal in ZIPFoundation

An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file...

PT-2023-30209 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.3-DEV Description: The issue is related to a Divide By Zero error in the gpac/gpac GitHub repository. Recommendations: For versions prior to 2.3-DEV, update to version 2.3-DEV or later to resolve the issue...

Command Injection Vulnerability in find-exec

Older versions of the package are vulnerable to Command Injection as an attacker controlled parameter. As a result, attackers may run malicious commands. For example: const find = require"find-exec"; find"mplayer; touch hacked" This creates a file named "hacked" on the filesystem. You should neve...

OSV-2023-769 Index-out-of-bounds in derive_spatial_luma_vector_prediction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61844 Crash type: Index-out-of-bounds Crash state: derivespatiallumavectorprediction filllumamotionvectorpredictors motionvectorsandrefindices...

PT-2023-24712 · Unknown · Bbs E-Popup

Name of the Vulnerable Software and Affected Versions: BBS e-Theme BBS e-Popup plugin versions = 2.4.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website,...

CVE-2023-39135

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

PT-2023-27666 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 Description: The issue concerns a Buffer Overflow that can be triggered via the function fromGetWirelessRepeat. Recommendations: For version 15.03.05.16, consider disabling the fromGetWirelessRepeat function as a...

CVE-2023-39616

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

MAL-2023-7952 Malicious code in ductai-chatbot-community (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27c77e0ede4c194a2280a25afb09eab42f56783293849e1ceb66bb39b6f62477 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-4650 · Mongodb +2 · Mongodb Node.Js Driver +5

Name of the Vulnerable Software and Affected Versions: MongoDB C Driver versions 1.0.0 through 1.17.7 MongoDB PHP Driver versions 1.0.0 through 1.9.2 MongoDB Swift Driver versions 1.0.0 through 1.1.1 MongoDB Node.js Driver 3.6 versions 3.6 through 3.6.10 MongoDB Node.js Driver 4.0 versions 4.0...

CVE-2023-41361

An issue was discovered in FRRouting FRR 9.0. bgpd/bgpopen.c does not check for an overly large length of the rcv software version...

PT-2023-27034

Name of the Vulnerable Software and Affected Versions AOMedia versions 3.0.0 through 3.5.0 Description The issue is related to an invalid read memory access via the component assign frame buffer p in av1/common/av1 common int.h. This component is part of the AOMedia library. Recommendations For...

CVE-2023-41359

An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgpattraigpvalid in bgpd/bgpattr.c because there is no check for the availability of two bytes during AIGP validation...

CVE-2023-39810

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

PT-2023-35975 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a stack-buffer-overflow read crash. The crash involves the functions sc color fprintf va, sc do log va, and sc do log. No...

e-Excellence U-Office Force 安全漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. A security vulnerability exists in e-Excellence U-Office Force, which can be exploited to obtain part of the system information from an error message returned by the web service by sending specif...

Stormshield Network Security (SNS) VPN SSL Client 安全漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from the French company Stormshield. A security vulnerability exists in the Stormshield Network Security SNS VPN SSL Client versions 2.1.0 through 2.8.0 that stems from having insecure privileges...