2304 matches found
BELL-CVE-2023-5633
Bulletin has no description...
BELL-CVE-2023-32731
Bulletin has no description...
BELL-CVE-2023-2731
Bulletin has no description...
BELL-CVE-2023-30775
Bulletin has no description...
CVE-2023-22102
...
SUSE SLED12: ImageMagick / ImageMagick-config-6-SUSE / etc (SUSE-SU-2023:4049-1)
The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4049-1 advisory. - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. bsc1215939 Tenable has extracted the preceding descriptio...
BELL-CVE-2023-4693
Bulletin has no description...
CVE-2023-39193
creationtimestamp| type| source ---|---|--- 2023-10-09 22:16:11+00:00| seen| https://t.me/cibsecurity/71858 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09...
CVE-2022-4318
A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable...
CVE-2023-41880
Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and 12.0.1 contain a miscompilation of the WebAssembly i64x2.shrs instruction on x8664 platforms when the shift amount is a constant value that is larger than 32. Only x8664 is affected so a...
BELL-CVE-2023-4785
Bulletin has no description...
CVE-2023-41764 Microsoft Office Spoofing Vulnerability
...
PT-2023-35988 · Unknown · Javaparser
Name of the Vulnerable Software and Affected Versions: JavaParser affected versions not specified Description: A security exception crash has been reported. The crash involves the insertComments function in com.github.javaparser.CommentsInserter, and the equals method in java.base/java.util.Objec...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : indent (SUSE-SU-2023:3433-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3433-1 advisory. - CVE-2023-40305: Fixed a memory safety issues bug. bsc1214243 Tenable has extracted the preceding...
BELL-CVE-2022-48063
Bulletin has no description...
Metabase Remote Code Execution Exploit
Metabase versions before 0.46.6.1 contain a flaw where the secret setup-token is accessible even after the setup process has been completed. With this token a user is able to submit the setup functionality to create a new database. When creating a new database, an H2 database string is created wi...
PT-2023-36240 · Unknown · Python-Pip
Name of the Vulnerable Software and Affected Versions: python-pip affected versions not specified Description: The issue with python-pip is related to the presence of .exe files in the RPM package, which could cause problems with security scanners. Recommendations: At the moment, there is no...
SpringBlade Secure Mode Bypass Vulnerability
SpringBlade is a microservices architecture upgraded and optimized from a commercial-grade project. SpringBlade suffers from a security model bypass vulnerability that stems from exposing a signing key, which can be exploited by an attacker to conduct a SQL injection attack by forging a JWT,...
CVE-2023-32261 Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. See the following Jenkins security advisory for details:...