CVE-2023-21529

Microsoft Exchange Server Remote Code Execution Vulnerability...

[Important] [Security] Virtuozzo ReadyKernel Patch 153.1 for Virtuozzo Hybrid Server 7.5

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5. Vulnerability id: CVE-2021-45868 3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4 Quota: check the block number when reading the block in ...

CVE-2023-24347

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcpplus...

SUSE-SU-2022:0562-2 Security update for jasper

This update for jasper fixes the following issues: - CVE-2021-27845: Fixed divide-by-zery issue in cpcreate bsc1188437...

Global ESXiArgs ransomware attack on the back of a two-year-old vulnerability

Global ESXiArgs Ransomware Attack on the Back of a Two-Year-Old Vulnerability By John Fokker, Alfred Alvarado, Tim Hux, Jeffrey Sman, Joao Marques · February 09, 2023 Figure 1: Global Telemetry from Trellix ATLAS for Ips connecting to port 427 Introduction: Early this week, VMware issued a...

MGASA-2023-0035 Updated nodejs-minimist packages fix security vulnerability

Minimist =1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey lines 69-95. CVE-2021-44906...

SUSE-SU-2023:0229-1 Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024129 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed use-after-free in grusetcontextoption, grufault and gruhandleusercallos that could lead to kernel panic bsc1204167. - CVE-2022-2602: Fixed a local privilege...

CVE-2022-48114

RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable...

CVE-2023-24163

SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...

CVE-2022-43979 Path Traversal leading to Local File Inclusion

There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that the parameter that the user has inserted does not contain malicious characteres, but this check is insufficient. An attacker could insert an absolute path to overcome the heck,...

CVE-2022-47105

Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData...

PT-2023-11726 · Hewlett Packard · Hpe

Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details of this issue are available via the National Vulnerability Database...

PT-2023-11935 · Hewlett Packard · Hpe

Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details of this issue are available via the National Vulnerability Database...

PT-2023-12370 · Hewlett Packard · Hpe

Name of the Vulnerable Software and Affected Versions: HPE affected versions not specified Description: The issue concerns a vulnerability that was initially assigned a CVE number but was unused by HPE. The details about this issue are available via the National Vulnerability Database...

CVE-2014-125035 Jobs-Plugin cross site scripting

A vulnerability classified as problematic was found in Jobs-Plugin. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier of the patch is b8a56718b1d42834c6ec51d9c489c5dc20471d7b. It is...

CVE-2022-46534

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the speeddir parameter at /goform/SetSpeedWan...

Fuji Electric Tellus Lite V-Simulator

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Fuji Electric Equipment: Tellus Lite V-Simulator Vulnerabilities: Out-of-bounds Write, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute...

CVE-2022-4602 Shoplazza LifeStyle Review Flow cross site scripting

A vulnerability was found in Shoplazza LifeStyle 1.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/api/theme-edit/ of the component Review Flow Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

CVE-2022-4593 retra-system cross site scripting

A vulnerability was found in retra-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is a6d94ab88f4a6f631a14c59b72461140fb57ae1f. It is recommended to...

CVE-2022-46351

A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. Specially crafted PROFINET DCP...