Security Bulletin: RESTEasy component is vulnerable to CVE-2023-0482 is used by IBM Maximo Application Suite

Summary IBM Maximo Application Suite uses RESTEasypackage which is vulnerable to CVE-2023-0482. Vulnerability Details CVEID:CVE-2023-0482 DESCRIPTION: RESTEasy could allow a local authenticated attacker to gain elevated privileges on the system, caused by the creation of insecure temp files in th...

CVE-2023-38926

Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wlatempssid parameter at acosNvramConfigset...

NETGEAR EX6200 安全漏洞

NETGEAR EX6200 is a wireless network signal extender from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR EX6200 v1.0.3.94, which originates from the wlatempssid parameter in acosNvramConfigset that fails to correctly validate the length and size of the input data, and can be...

Security Bulletin: IBM PowerVM Novalink is vulnerable because RESTEasy could allow a local authenticated attacker to gain elevated privileges on the system, caused by the creation of insecure temp files in the File. (CVE-2023-0482)

Summary IBM PowerVM Novalink is vulnerable because RESTEasy could allow a local authenticated attacker to gain elevated privileges on the system, caused by the creation of insecure temp files in the File.createTempFile used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes. By...

CVE-2023-32231

An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818. During installation, binaries gets executed out of a subfolder in C:\Windows\Temp. A standard user can create the folder and path file ahead of time and obtain elevated code execution...

CVE-2023-32231

An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818. During installation, binaries gets executed out of a subfolder in C:\Windows\Temp. A standard user can create the folder and path file ahead of time and obtain elevated code execution...

Path traversal

An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818. During installation, binaries gets executed out of a subfolder in C:\Windows\Temp. A standard user can create the folder and path file ahead of time and obtain elevated code execution...

Vasion PrinterLogic Client 安全漏洞

Vasion PrinterLogic Client is a print management solution from Vasion. A security vulnerability exists in Vasion PrinterLogic Client Windows versions prior to 25.0.0.818, which stems from a binary file that can be executed from a subfolder in C:WindowsTemp during installation...

PT-2023-23675 · Vasion · Vasion Printerlogic Client

Name of the Vulnerable Software and Affected Versions: Vasion PrinterLogic Client for Windows versions prior to 25.0.0.818 Description: An issue was discovered in the Vasion PrinterLogic Client for Windows. During installation, binaries are executed out of a subfolder in C:WindowsTemp. A standard...

CVE-2023-32231: Undefined Security Weakness

An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818. During installation, binaries gets executed out of a subfolder in C:\Windows\Temp. A standard user can create the folder and path file ahead of time and obtain elevated code execution...

CVE-2023-26077

Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions...

CVE-2023-26077

The CVE-2023-26077 issue affects Atera Agent for Windows (versions 1.8.3.6 and earlier). It arises from the MSI installer’s repair functionality creating temporary files in directories with insecure permissions, enabling potential local privilege escalation (e.g., via DLL hijacking) when exploite...

WordPress Temp Mail X Theme <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Temp Mail X Type Theme Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 010056c53463 Credits Rafie Muhammad Patchstack Required...

WordPress WP Temp Mail (Temporary Mail Service Powered By WordPress) Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Temp Mail Temporary Mail Service Powered By WordPress Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6a5eb4e385ef...

MAL-2023-805 Malicious code in sssssssignalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cc23bf354e5520194687388c9f9fedf32c28fbdd1bdaeb8abb7a0b1943f352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sssssssignalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cc23bf354e5520194687388c9f9fedf32c28fbdd1bdaeb8abb7a0b1943f352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in signalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001810ee89c4e150cce7a1b0e7aef619fc71752b514250543e9e7adbef908c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-54000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists when reading the 'trace pipe' file within the Linux kernel's tracing subsystem. Specifically, the iter-temp memory is allocated or relocated in the trace find next...

Security Bulletin: There are several vulnerabilities in Liberty used by the IBM Maximo Manage application in the IBM Maximo Application Suite

Summary There are several vulnerabilities in Liberty used by the IBM Maximo Manage application in the IBM Maximo Application Suite. These vulnerabiblities have been addressed. Vulnerability Details CVEID:CVE-2023-0482 DESCRIPTION: RESTEasy could allow a local authenticated attacker to gain elevat...

CVE-2023-20178

A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to elevate privileges to those of SYSTEM. The client update process is executed aft...