OSV-2023-504 Heap-buffer-overflow in ndpi_search_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60003 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchline checkndpidetectionfunc ndpicheckflowfunc...

The vulnerability of the ApexOne Security Agent for antivirus software from Trend Micro, Apex One and Apex One as a Service, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the ApexOne Security Agent in antivirus software products Trend Micro Apex One and Apex One as a Service is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

GHSA-6VF2-MFMR-QQQW Liufee CMS File Upload vulnerability

File Upload vulnerability in Liufee CMS, AKA Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...

GHSA-GQR4-CVF4-3957 YiiCMS Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in YiiCMS v.1.2.0 and prior allows a remote attacker to execute arbitrary code via the news function...

PYSEC-2023-92

Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...

Cross-Site Scripting (XSS)

craftcms/cms is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to a lack of sanitization in field names, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

PT-2023-25348 · Unknown · Siren Investigate

Name of the Vulnerable Software and Affected Versions: Siren Investigate versions prior to 13.2.2 Description: The issue concerns session keys remaining active even after a user logs out. This could potentially allow unauthorized access to user sessions. Recommendations: For versions prior to...

CVE-2023-35840

joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector...

CVE-2023-3022

A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6rulelookup, sometimes holding rt6info and other times fib6info. This was not accounted for in other parts of the code where rt6info was expected unconditionally, potentially leading to a kerne...

CVE-2023-35862

libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...

PT-2023-35873 · Git +1 · Poppler

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the functions utf8ToUtf16 and utf8ToUtf16WithBom, as well...

whaleal IceFrog 代码问题漏洞

whaleal IceFrog is a small but comprehensive Java tool library from whaleal. A code issue vulnerability exists in whaleal IceFrog version 1.1.8, which stems from a problem with the component Aviator Template Engine that causes deserialization...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:10121-1 Rating: important References: Cross-References: CVE-2022-3075 CVSS scores: CVE-2022-3075 NVD : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 15.5:NonFree An update tha...

CVE-2023-34475

A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...

CVE-2023-35790

An issue was discovered in decpatchdictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop...

GHSA-5JFG-PHX7-7FXG Magento Open Source affected by Improper Input Validation

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to leak another user's data. Exploitation of this issue...

GHSA-85M4-G9VQ-XPXJ Magento Open Source allows Information Exposure

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Information Exposure vulnerability that could lead to a security feature bypass. An attacker could leverage this vulnerability to leak minor user data. Exploitation of this issue does not...

OSV-2022-1276 Stack-buffer-overflow in ntlm_phase_3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59818 Crash type: Stack-buffer-overflow WRITE 1 Crash state: ntlmphase3 establishhttpproxypassthru fuzzproxy.c...

MGASA-2023-0200 Updated thunderbird packages fix security vulnerability

Click-jacking certificate exceptions through rendering lag CVE-2023-34414 Memory safety bugs fixed in Thunderbird 102.12 CVE-2023-34416...

CVE-2023-24032

In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker who has initial user access to a Zimbra server instance can execute commands as root by passing one of JVM arguments, leading to local privilege escalation LPE...