6568 matches found
EulerOS Virtualization 2.10.1 : procps-ng (EulerOS-SA-2023-3516)
According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write...
EulerOS Virtualization 3.0.6.0 : procps-ng (EulerOS-SA-2023-3446)
According to the versions of the procps-ng packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write...
EulerOS Virtualization 2.10.1 : procps-ng (EulerOS-SA-2023-3508)
According to the versions of the procps-ng packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write...
EulerOS Virtualization 2.9.1 : procps-ng (EulerOS-SA-2024-1052)
According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write...
EulerOS 2.0 SP9 : procps-ng (EulerOS-SA-2023-2905)
According to the versions of the procps-ng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write almost unlimite...
EulerOS 2.0 SP8 : procps-ng (EulerOS-SA-2023-3147)
According to the versions of the procps-ng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write almost unlimite...
EulerOS Virtualization 2.10.1 : libtiff (EulerOS-SA-2023-2918)
According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. CVE-2023-26965 -...
Malicious code in api-utility (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a224689494381a4efa5f5c4b27d5d186501f995fdedef22fb6141dd252e1e39 The OpenSSF Package Analysis project identified 'api-utility' @ 1.1.999 npm as malicious. It is considered malicious because: - The package...
MAL-2024-83 Malicious code in api-utility (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a224689494381a4efa5f5c4b27d5d186501f995fdedef22fb6141dd252e1e39 The OpenSSF Package Analysis project identified 'api-utility' @ 1.1.999 npm as malicious. It is considered malicious because: - The package...
Archive Utility macOS Unauthenticated Access
The vulnerability of the Archive Utility component in macOS operating systems is related to data processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2023-49257: Incorrect Permission Assignment for Critical Resource
An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges...
CDO Local UUID Utility Security Vulnerability
The CDO Local UUID Utility is a specialized UUID generation function that enables the program to generate deterministic UUIDs upon user request. A security vulnerability exists in CDO Local UUID Utility prior to version 0.15.0, which stems from an information leakage vulnerability in case-utils...
Where is the ReceiverCleanupUtility.exe after installing CWA
This article describes the location of ReceiverCleanupUtility.exe Receiver Clean-Up Utility tool after installing Citrix Workspace app for Windows CWA...
CVE-2023-37578
Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-37922
Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary...
CVE-2023-37578
Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-37922
Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary...
CVE-2023-37921
Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary...
CVE-2023-37576
Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
DEBIAN-CVE-2023-37420
Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...