5314 matches found
The vulnerabilities of the Airflow SMTP Provider and Airflow IMAP Provider software, which are used for creating, monitoring, and orchestrating data processing scenarios in Airflow, allow attackers to gain unauthorized access to confidential data.
The vulnerabilities of the Airflow SMTP Provider and Airflow IMAP Provider, which are software components for creating, monitoring, and orchestrating data processing scenarios, are related to errors in the certificate validation process. Exploiting these vulnerabilities can allow an attacker to...
PT-2023-27851 · Lg · Lg Supersign Media Editor
Name of the Vulnerable Software and Affected Versions: LG SuperSign Media Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this...
PT-2023-27475 · Lg · Lg Simple Editor
Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: This issue allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this issue. The specific flaw...
PT-2023-27492 · Lg · Lg Simple Editor
Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this issue, the...
PT-2023-27495 · Lg · Lg Supersign Media Editor
Name of the Vulnerable Software and Affected Versions: LG SuperSign Media Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this...
(0Day) LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability
This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the deleteCheckSession method. The issue results from the lack of proper validation of ...
DRUPAL-CONTRIB-2023-040
The Data Field module provides a way of building field types that are made up of other fields, a simpler alternative to e.g. the Paragraphs system. Access to these forms isn't properly validated, allowing a user with the "access content" permission to view and edit fields on entities...
PT-2023-4865 · D Link · D-Link Dap-2622
Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. The specific flaw exists within the DDP service, resulti...
PT-2023-4930 · D Link · D-Link Dap-2622
Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. The specific flaw exists within the DDP service, resulti...
SUSE-SU-2023:3380-1 Security update for qt6-base
This update for qt6-base fixes the following issues: - CVE-2023-34410: Fixed certificate validation flaw bsc1211994. - CVE-2023-33285: Fixed buffer overflow in QDnsLookup bsc1211642. - CVE-2023-32762: Fixed strict-transport-security HSTS header parsing error QTBUG-113392 bsc1211797. -...
The vulnerability of the ThinServer component of the Rockwell Automation ThinManager application management platform allows a attacker to trigger a service failure.
The vulnerability of the ThinServer component of Rockwell Automation’s ThinManager application management platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Danfoss AK-SM800A 安全漏洞
Danfoss AK-SM800A is a system manager from Danfoss, Denmark. Provides secure system control and monitoring A security vulnerability exists in Danfoss AK-SM800A 3.3 and earlier versions that originates from improper input validation and can be exploited by an attacker to execute arbitrary commands...
CVE-2023-20242
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified CM Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated, remote attacker to...
Cisco Unified Communications Manager 跨站脚本漏洞
Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A security vulnerability exists ...
DEBIAN-CVE-2023-4357
Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2023-21272
In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a attacker to cause a service failure.
The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of ODBC and OLE DB drivers in the Windows operating system arises from insufficient validation of input data, allowing an attacker to execute arbitrary code.
The vulnerability of ODBC and OLE DB drivers in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Intel NUC BIOS firmware security vulnerability
The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the IntelR NUC BIOS firmware that originates from incorrect input validation. An attacker can exploit the vulnerability to elevate privileges...