CVE-2023-43341

Cross-site scripting XSS vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter...

CVE-2023-43341: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter...

Fedora 37 : openmpi / pmix / prrte / slurm (2023-155d2f22f1)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-155d2f22f1 advisory. Security fix for CVE-2023-41915 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Amazon Linux 2023 : pmix, pmix-devel, pmix-pmi (ALAS2023-2023-363)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-363 advisory. OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0. CVE-2023-41915 Tenable has...

CVE-2023-5300

A vulnerability classified as critical has been found in TTSPlanning up to 20230925. This affects an unknown part. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...

CVE-2023-5300 TTSPlanning sql injection

A vulnerability classified as critical has been found in TTSPlanning up to 20230925. This affects an unknown part. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...

PT-2023-32020

Name of the Vulnerable Software and Affected Versions TTSPlanning versions up to 20230925 Description A critical vulnerability has been found in TTSPlanning, affecting an unknown part. The manipulation of the uid argument leads to SQL injection. It is possible to initiate the attack remotely. The...

CVE-2023-5300: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in TTSPlanning up to 20230925. This affects an unknown part. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...

SUSE SLES15: libmca_common_dstore1 / libpmix2 / pmix / pmix-devel / pmix-headers / etc (SUSE-SU-2023:3859-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3859-1 advisory. - CVE-2023-41915: Fixed a potential vulnerability where a chown may follow a user-created link bsc1215190. - Install pmix-plugin-munge if...

CVE-2023-43314

UNSUPPORTED WHEN ASSIGNED The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00ABNK.2b11C0 could allow an unauthenticated attacker to cause a denial of service condition via a crafted uid...

CVE-2023-43314

UNSUPPORTED WHEN ASSIGNED The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00ABNK.2b11C0 could allow an unauthenticated attacker to cause a denial of service condition via a crafted uid...

CVE-2023-43314: Buffer Copy without Checking Size of Input

UNSUPPORTED WHEN ASSIGNED The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00ABNK.2b11C0 could allow an unauthenticated attacker to cause a denial of service condition via a crafted uid...

CVE-2023-43314

UNSUPPORTED WHEN ASSIGNED The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00ABNK.2b11C0 could allow an unauthenticated attacker to cause a denial of service condition via a crafted uid...

GHSA-2R3C-M6V7-9354 sudo-rs Session File Relative Path Traversal vulnerability

Background Sudo-rs allows users to not have to enter authentication at every sudo attempt, but instead only requiring authentication every once in a while in every terminal or process group. Only once a configurable timeout has passed will the user have to re-authenticate themselves. Supporting...

CVE-2023-42456

Sudo-rs, a memory safe implementation of sudo and su, allows users to not have to enter authentication at every sudo attempt, but instead only requiring authentication every once in a while in every terminal or process group. Only once a configurable timeout has passed will the user have to...

Path traversal

Sudo-rs, a memory safe implementation of sudo and su, allows users to not have to enter authentication at every sudo attempt, but instead only requiring authentication every once in a while in every terminal or process group. Only once a configurable timeout has passed will the user have to...

CVE-2023-41915

OpenPMIx PMIx is vulnerable to a race condition during execution of library code with UID 0, which allows attackers to obtain ownership of arbitrary files...

AZL-29702 CVE-2023-41915 affecting package pmix for versions less than 4.1.3-1

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0...

CVE-2023-41915

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0...

CVE-2023-41915

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0...