PT-2023-28093 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 773 Description: The issue is related to an Uncontrolled Search Path Element vulnerability, which allows for Leveraging/Manipulating Configuration File Search Paths. This vulnerability enables access to the...

The vulnerability of the Xenon Ashlar-Vellum software for 3D modeling lies in its uncontrolled search element, which allows a hacker to execute arbitrary code.

The vulnerability of the Xenon Ashlar-Vellum software for 3D modeling is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a hacker to execute arbitrary code...

The vulnerability of the 3D modeling software Argon Ashlar-Vellum lies in its uncontrolled search element, which allows a hacker to execute arbitrary code.

The vulnerability of the 3D modeling software Argon Ashlar-Vellum is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

The vulnerability of Wheel Python Packaging Authority’s installation tools, related to uncontrolled resource consumption, allows a perpetrator to cause service failures.

The vulnerability of the Wheel Python Packaging Authority installation tools is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the software for parametric automated design and 3D modeling of Lithium Ashlar-Vellum lies in its uncontrolled element during the search process, allowing a perpetrator to execute arbitrary code.

The vulnerability of the software for parametric automated design and 3D modeling of Lithium Ashlar-Vellum is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

CVE-2023-47314

Headwind MDM Web panel version 5.22.1 is affected by a cross-site scripting (XSS) vulnerability arising from the file upload feature, which allows APK and arbitrary files to be uploaded. The vulnerability enables an attacker to upload HTML files and share a download URL; because the file is serve...

CVE-2023-6235

An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...

Path traversal

An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...

CVE-2023-6235 Arbitrary code execution in Duet Display

An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...

Duet Display Security Vulnerability

Duet Display is a remote desktop application. A security vulnerability exists in Duet Display version 2.5.9.1 that stems from the presence of an uncontrolled search path element vulnerability. An attacker can place an arbitrary libusk.dll file in the C:UsersuserAppDataLocalMicrosoftWindowsApps...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...

The vulnerability of Zoom’s video conferencing software, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of Zoom, a video conferencing software, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the software installer for SanDisk SecureAccess drives allows a hacker to execute arbitrary code.

The vulnerability of the software installer for SanDisk SecureAccess drives relates to an uncontrolled search path element. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Security Bulletin: IBM Storage Fusion may be vulnerable to Denial of Service via use of golang.org/x/net, x/crypto, and x/text (CVE-2022-30633, CVE-2022-27664, CVE-2022-28131, CVE-2022-41721, CVE-2021-43565, CVE-2022-27191, CVE-2022-32149)

Summary Golang's x/net, x/crypto and x/text are used by IBM Storage Fusion for networking, cryptography and internationalization. Vulnerabilities in these libraries include Inconsistent Interpretation of HTTP Requests, Uncontrolled Recursion, and Missing Release of Resource that could lead to a...

Security Bulletin: IBM Storage Fusion may be vulnerable to Denial of Service via use of openshift/machine-api-operator, openshift/machine-config-operator (CVE-2020-28851, CVE-2020-28852, CVE-2021-44716)

Summary OpenShift's machine-api-operator and machine-config-operator are used by IBM Storage Fusion to interact with the OpenShift platform, operators, and custom resource definitions. Vulnerabilities in these libraries include an improper validation of array index and possible uncontrolled...

The vulnerability of the parse method in the json5 package manager library in NPM allows a hacker to trigger a service failure.

The vulnerability of the parse method in the json5 package manager library from NPM is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Catalog::findDestInTree() function in PDF viewing software called Xpdf, which allows a hacker to cause a service failure.

The vulnerability of the Catalog::findDestInTree function in PDF viewing software called Xpdf is related to an uncontrolled recursion. Exploiting this vulnerability allows attackers to cause service failures...

Zoom Client < 5.16.0 Multiple Vulnerabilities (ZSB-23047, ZSB-23049, ZSB-23050, ZSB-23051, ZSB-23052, ZSB-23055) - Windows

The Zoom Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescription...

CVE-2023-39203

Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2023-39203

CVE-2023-39203 affects Zoom Desktop Client for Windows and Zoom VDI Client within Zoom Team Chat, where uncontrolled resource consumption could allow an unauthenticated user to disclose information via network access. Public records confirm this as a resource-management vulnerability tied to Zoom...