3531 matches found
CVE-2001-1228
creationtimestamp| type| source ---|---|--- 2023-12-24 08:20:31+00:00| seen| https://t.me/arpsyndicate/2161...
CVE-2023-33088
creationtimestamp| type| source ---|---|--- 2023-12-23 16:52:06+00:00| seen| https://t.me/ctinow/158862...
CVE-2023-49284
creationtimestamp| type| source ---|---|--- 2023-12-23 11:41:46+00:00| seen| https://t.me/ctinow/158779...
CVE-2022-4957
creationtimestamp| type| source ---|---|--- 2023-12-22 09:22:15+00:00| seen| https://t.me/ctinow/158263...
ClickHouse Security Breach
ClickHouse is ClickHouse's fastest and most resource-efficient open source database for real-time applications and analytics. A security vulnerability exists in ClickHouse that originates from an attacker being able to send a specially crafted payload to the publicly available native interface on...
CVE-2023-6857
When resolving a symlink, a race may occur where the buffer passed to readlink may actually be smaller than necessary. This bug only affects Firefox on Unix-based operating systems Android, Linux, MacOS. Windows is unaffected. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and...
CVE-2023-6355
Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug. This issue affects: Gallagher Controller 7000 9.00 prior to vCR9.00.231204b distributed in 9.00.1507 MR1, 8.90 prior to vCR8.90.231204a distributed in...
PT-2023-32624 · Gallagher · Gallagher Controller 7000
Name of the Vulnerable Software and Affected Versions: Gallagher Controller 7000 versions 8.70 prior to vCR8.70.231204a Gallagher Controller 7000 versions 8.80 prior to vCR8.80.231204a Gallagher Controller 7000 versions 8.90 prior to vCR8.90.231204a Gallagher Controller 7000 versions 9.00 prior t...
PT-2023-7778 · Siemens · Opcenter Quality +4
Name of the Vulnerable Software and Affected Versions: Opcenter Execution Foundation versions prior to V2407 Opcenter Quality versions prior to V2312 SIMATIC PCS neo versions prior to V4.1 SINEC NMS versions prior to V2.0 SP1 Totally Integrated Automation Portal TIA Portal V14 Totally Integrated...
PT-2023-7533 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the December 2023 security update Description: The issue is related to a use after free vulnerability in the callback thread event function of com android bluetooth btservice AdapterService.cpp. This could lead to...
CVE-2022-26718
creationtimestamp| type| source ---|---|--- 2023-11-29 08:50:41+00:00| seen| https://t.me/arpsyndicate/703...
CVE-2023-47118
A heap buffer overflow vulnerability affecting the native interface running by default on port 9000/tcp. An attacker, by triggering a bug in the T64 compression codec, can cause the ClickHouse server process to crash. This vulnerability can be exploited without the need to authenticate. Fix has...
PT-2023-30912 · Unknown +1 · Gorilla Codec +2
Name of the Vulnerable Software and Affected Versions: ClickHouse versions 23.3.18.15, 23.8.8.20, 23.9.6.20, 23.10.5.20 ClickHouse Cloud version 23.9.2.47551 Description: A heap buffer overflow issue was discovered in the ClickHouse server, allowing an attacker to send a specially crafted payload...
CVE-2022-4205
creationtimestamp| type| source ---|---|--- 2023-11-22 22:59:06+00:00| seen| https://t.me/arpsyndicate/365...
CVE-2022-46337
A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker fill up the disk by creating junk Derby databases. In LDAP-authenticated Derby installations, this could also allow the attacker to execute malware which was...
CVE-2020-2926
creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:23+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5992...
CVE-2023-46964
Cross Site Scripting XSS vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering...
CVE-2012-3785
creationtimestamp| type| source ---|---|--- 2023-11-04 08:43:51+00:00| seen| https://t.me/cibsecurity/70469...
The vulnerability of the Microsoft Azure StorSimple Series 8000 software and hardware storage solutions is related to deficiencies in access control. This allows attackers to escalate their privileges.
The vulnerability of the Microsoft Azure StorSimple Series 8000 software and hardware storage solutions is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...