AZL-27064 CVE-2023-2602 affecting package libcap for versions less than 2.60-2

A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause realpthreadcreate to return an error, which can exhaust the process memory...

CVE-2023-25740

After downloading a Windows .scf script from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource. This bug only affects Firefox for Windows. Othe...

AZL-27078 CVE-2023-2002 affecting package kernel for versions less than 5.15.116.1-2

A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hcisock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth...

NetApp BlueXP Cloud 路径遍历漏洞

NetApp BlueXP Cloud is a network disk. A security vulnerability exists in NetApp BlueXP versions prior to 3.9.25, which stems from disclosing information via directory listings...

CVE-2022-27404 affecting package qt5-qtbase for versions less than 5.15.9-1

CVE-2022-27404 affecting package qt5-qtbase for versions less than 5.15.9-1. A patched version of the package is available...

CVE-2023-2008 affecting package kernel for versions less than 5.15.111.1-1

CVE-2023-2008 affecting package kernel for versions less than 5.15.111.1-1. A patched version of the package is available...

CVE-2023-27477 affecting package rust for versions less than 1.68.2-2

CVE-2023-27477 affecting package rust for versions less than 1.68.2-2. A patched version of the package is available...

CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33

CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33. A patched version of the package is available...

PT-2023-23756 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 16.5 Apple iPadOS versions prior to 16.5 Apple watchOS versions prior to 9.5 Apple tvOS versions prior to 16.5 Apple macOS Ventura versions prior to 13.4 Description: An out-of-bounds read issue was addressed with...

PT-2023-17387 · WordPress · Web Stories For Wordpress

Name of the Vulnerable Software and Affected Versions: Web Stories for WordPress versions prior to 1.32 Description: The Web Stories for WordPress plugin has a vulnerability that allows users with the "Author" role to bypass permission checks and access password-protected content. Normally, users...

morethanyouthink.org.au Cross Site Scripting vulnerability OBB-3298802

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-25153 affecting package k3s for versions less than 1.25.5-7

CVE-2023-25153 affecting package k3s for versions less than 1.25.5-7. A patched version of the package is available...

CVE-2018-25032 affecting package boost for versions less than 1.76.0-3

CVE-2018-25032 affecting package boost for versions less than 1.76.0-3. A patched version of the package is available...

Upgraded Q -> 2 from #882 [1683052827510]

Judge has assessed an item in Issue 882 as 2 risk. The relevant finding follows: changeFeeQuote reverts for tokens with decimals less than 4 --- The text was updated successfully, but these errors were encountered: All reactions...

Office application installation when using a Citrix Workspace App version higher than 2107

When launching the first MS Office Pro Plus 2016 application in a session, a partial installation is ran...

CVE-2023-25556

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation...

modoboa 安全漏洞

modoboa is an email hosting and management platform for individual developers. A security vulnerability exists in modoboa versions prior to 2.1.0, which can be exploited to bypass a strong password policy by removing specific parameters and setting the password to 1...

CVE-2022-2867 affecting package libtiff for versions less than 4.5.0-1

CVE-2022-2867 affecting package libtiff for versions less than 4.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27538 affecting package curl for versions less than 8.0.1-1

CVE-2023-27538 affecting package curl for versions less than 8.0.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27536 affecting package curl for versions less than 8.0.1-1

CVE-2023-27536 affecting package curl for versions less than 8.0.1-1. An upgraded version of the package is available that resolves this issue...