Denial of service caused by infinite recursion when parsing SVG images

More info at https://nvd.nist.gov/vuln/detail/CVE-2023-50262...

CVE-2023-50422 Escalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)

SAP BTP Security Services Integration Library Java cloud-security-services-integration-library - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary...

PT-2023-30892 · Acronis · Acronis Cyber Protect Cloud Agent +1

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office versions prior to build 40901 Acronis Cyber Protect Cloud Agent versions prior to build 39378 Description: The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This allow...

CVE-2023-49993

Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at readclause.c...

Maspik – Spam blacklist < 0.10.4 - IP Validation Bypass

Description The plugin does not properly validates IP addresses, allowing unauthenticated attackers to bypass IP-based restrictions...

PT-2023-8578 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Sampler versions 4.2.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2023-41117

An issue was discovered in EnterpriseDB Postgres Advanced Server EPAS before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contain packages, standalone packages, and functions that run SECURITY DEFINER but are inadequately secured against...

CVE-2023-49994

Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c...

The vulnerability of function sub_417338 in the microprogramming software of the TOTOLINK X6000R router allows a hacker to execute arbitrary code.

The vulnerability of sub417338 in the microprogramming software of the TOTOLINK X6000R router is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2023-50463

The caddy-geo-ip aka GeoIP middleware through 0.6.0 for Caddy 2, when trustheader X-Forwarded-For is used, allows attackers to spoof their source IP address via an X-Forwarded-For header, which may bypass a protection mechanism trustedproxy directive in reverseproxy or IP address range restrictio...

Structured Content < 1.6 - Contributor+ PHP Object Injection

Description The plugin is vulnerable to PHP Object Injection via deserialization of untrusted input. This makes it possible for attackers, with contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable plugin. If a POP chain is present via an...

BELL-CVE-2023-6622

Bulletin has no description...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial of Service DoS. The vulnerability occurs due to a memory leak in the gfsgvrmlfieldpointerdel function of scenegraph/vrmltools.c, allowing remote attackers to cause denial of service conditions...

The vulnerability of microprogrammed software in Osprey Pump Controller controllers allows a intruder to gain unauthorized access to the device.

The vulnerability of the microprogrammed software of Osprey Pump Controller devices exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to the device...

The vulnerability of microprogrammed software in Osprey Pump Controller controllers allows a intruder to alter arbitrary data or cause malfunctions during maintenance.

The vulnerability of microprogrammed software in Osprey Pump Controller controllers relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to alter arbitrary data or cause malfunctions in the system...

The vulnerability of microprogrammed software in Osprey Pump Controller controllers allows a intruder to gain unauthorized access to the device.

The vulnerability of the microprogrammed software of Osprey Pump Controller controllers is related to insufficient entropy. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the device...

CVE-2023-48830

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

BELL-CVE-2023-45866

Bulletin has no description...

BELL-CVE-2023-46219

Bulletin has no description...

PT-2023-9073 · Oracle · Primavera P6 Enterprise Project Portfolio Management

Name of the Vulnerable Software and Affected Versions: Primavera P6 Enterprise Project Portfolio Management versions 19.12.0 through 19.12.22 Primavera P6 Enterprise Project Portfolio Management versions 20.12.0 through 20.12.21 Primavera P6 Enterprise Project Portfolio Management versions 21.12....