CVE-2023-5834: Insecure Operation on Windows Junction / Mount Point

HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0...

procps-ng DoS

The vulnerability of the procps-ng command-line tool for collecting information about running processes is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure by writing unlimited amounts of unfilter...

Titan SFTP MFT NextGen Server Improper Session Management

The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in improper session management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by writing the file to any location within the file system...

ROS-20231020-03

The ps utility vulnerability is related to out-of-field writes. Exploitation of the vulnerability could allow an attacker acting remotely to write unlimited amounts of unfiltered data to the heap of the process...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20220304.10057)

The version of AHV installed on the remote host is prior to 20220304.10057. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20220304.10057 advisory. - An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20220304.420)

The version of AHV installed on the remote host is prior to 20220304.420. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20220304.420 advisory. - An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via...

PT-2023-6214 · South River Technologies · Titan Mft +1

Name of the Vulnerable Software and Affected Versions: South River Technologies' Titan MFT and Titan SFTP servers affected versions not specified Description: A session fixation issue allows an attacker to bypass server authentication by tricking an administrator into authorizing a session ID of...

Microsoft Visual Studio Name Reference Arbitrary File Write

The vulnerability of the Microsoft Visual Studio software relates to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor to write arbitrary files into the system remotely...

kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation

A use-after-free vulnerability was found in the Netfilter subsystem of the Linux kernel when processing batch requests to update nftables configuration. This vulnerability can be abused to perform arbitrary reads and writes in kernel memory. A local user with CAPNETADMIN capability could use this...

Dell SmartFabric Storage Software 路径遍历漏洞

Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. A path traversal vulnerability exists in Dell SmartFabric Storage Software, which arises from the program failing to properly filter for specific elements in a resource or file path. An attacker could use...

USN-6411-1 exim4 vulnerabilities

It was discovered that Exim incorrectly handled certain challenge requests. A remote attacker could possibly use this issue to perform out-of-bounds reads, resulting in information leakage. CVE-2023-42114 It was discovered that Exim incorrectly handled validation of user-supplied data. A remote...

Out Of Bound Writes

mpfr4 is vulnerable to Out of Bound Writes. The vulnerability exists due to a buffer overflow which allows an attacker to perform out of bound writes...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in the MediaTek chips, which stems from a video module privilege bypass that could result in out-of-bounds writes...

MediaTek Chip Input Validation Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. An input validation error vulnerability exists in the MediaTek chips, which stems from an integer overflow in the vpu module and may result in out-of-bounds writes...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a company owned by MediaTek of China. A buffer error vulnerability exists in the MediaTek chips, which stems from a lack of input validation in the camera middleware module, which may result in out-of-bounds writes...

MediaTek Chip Input Validation Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. An input validation error vulnerability exists in the MediaTek chips, which stems from an integer overflow in the apusys module that could result in out-of-bounds writes...

SUSE SLES15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2023:3899-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3899-1 advisory. Update to Firefox Extended Support Release 115.3.0 ESR MFSA 2023-42, bsc1215575: Security fixes: - CVE-2023-5168: Out-of-bounds wri...

FLAC Heap Buffer Overflow DoS

The vulnerability of the bitwritergrow function in the FLAC audio codec is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Amazon Linux 2 : firefox (ALASFIREFOX-2023-007)

The version of firefox installed on the remote host is prior to 102.8.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2023-007 advisory. firefox-esr , thunderbird and nss only are affected by this package. CVE-2023-0767 The Mozilla Foundation Security...

CVE-2023-2163

An incorrect verifier pruning flaw was found in BPF in the Linux Kernel that may lead to unsafe code paths incorrectly marked as safe, resulting in arbitrary read/writes in kernel memory, lateral privilege escalation, and container escape. Mitigation The default Red Hat Enterprise Linux kernel...