Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2022
... (+5)
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2022
... (+5)
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2022
... (+5)
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2022
... (+5)
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2022
... (+5)
Windows Security Zone Mapping Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2012
... (+13)
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2022
... (+5)
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2022
... (+5)
Windows TCP/IP Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+7)
A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resource exhaustion when the application send back rows with long attribute values.
AFFECTED_PRODUCTS:
Red Hat Single Sign On
Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service.
AFFECTED_PRODUCTS:
Codesys Oscat Basic Library
D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.14.1 where the "Custom Filter" input is turned off by default.
AFFECTED_PRODUCTS:
Man D Tale
Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to arbitrary file system locations to which the Nix process has access. This will be with root permission...
AFFECTED_PRODUCTS:
Nixos Nix
auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is possible because `%source_label%` in twig macro is not escaped. Therefore script t...
AFFECTED_PRODUCTS:
Damienharper Auditor Bundle
XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the version number, the author of the modification (both username an...
AFFECTED_PRODUCTS:
Xwiki Xwiki,
Xwiki Xwiki
body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1....
AFFECTED_PRODUCTS:
Openjsf Body Parser
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Remote user-controlled data tags can reach a Unicode normalization with a compatibility form NFKD. Under Windows, such normalization is costly in resources and may lead to denial of s...
AFFECTED_PRODUCTS:
Yeti-Platform Yeti
Sunshine is a self-hosted game stream host for Moonlight. Clients that experience a MITM attack during the pairing process may inadvertantly allow access to an unintended client rather than failing authentication due to a PIN validation error. The pairing attempt fails due to the incorrect PIN, but...
AFFECTED_PRODUCTS:
Lizardbyte Sunshine
Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV.
AFFECTED_PRODUCTS:
Hathway Skyworth Cm5100 511 Firmware
eladmin v2.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the DatabaseController.java component.
AFFECTED_PRODUCTS:
Eladmin Eladmin
eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to execute arbitrary code via LocalStoreController. java.
AFFECTED_PRODUCTS:
Eladmin Eladmin
An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free.
Loftware Spectrum through 4.6 has unprotected JMX Registry.
AFFECTED_PRODUCTS:
Loftware Spectrum
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.
AFFECTED_PRODUCTS:
Loftware Spectrum
Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.
AFFECTED_PRODUCTS:
Loftware Spectrum
Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request.
AFFECTED_PRODUCTS:
Tenda Ac15 Firmware
Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account can access webhook delivery information for any webhook registered on the CVAT instance, including that of other users. For each delivery, this contains infor...
AFFECTED_PRODUCTS:
Cvat Computer Vision Annotation Tool
An improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include inf...
AFFECTED_PRODUCTS:
Fortinet Fortiedrmanager,
Fortinet Fortiedrmanager
Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation (i.e. "w" for "whoami") the ACL check did not apply to the full form (i.e. "whoami") but to the abbreviated...
serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.
AFFECTED_PRODUCTS:
Openjsf Serve Static,
Openjsf Serve Static
Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.
AFFECTED_PRODUCTS:
Send Project Send
Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched in express 4.20.0.
AFFECTED_PRODUCTS:
Openjsf Express,
Openjsf Express
Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized act...
AFFECTED_PRODUCTS:
Citrix Workspace
An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an...
AFFECTED_PRODUCTS:
Fortinet Fortiadc
A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an unauthenticated attacker that has physical access to a jailbroken device to obtain cleart...
AFFECTED_PRODUCTS:
Fortinet Forticlient
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthenticated attacker to execute limited and temporary operations on the underlying database via crafted...
AFFECTED_PRODUCTS:
Fortinet Forticlient Enterprise Management Server,
Fortinet Forticlient Enterprise Management Server
An exposure of sensitive information to an unauthorized actor in Fortinet FortiSandbox version 4.4.0 through 4.4.4 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.5 and 3.2.2 through 3.2.4 and 3.1.5 allows attacker to information disclosure via HTTP get requests.
AFFECTED_PRODUCTS:
Fortinet Fortisandbox,
Fortinet Fortisandbox,
Fortinet Fortisandbox
AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and FortiClientMac 7.0.0 through 7.0.11, 7.2.0 through 7.2.4 may allow a remote and unauthenticated attacker to perform a Man-in-...
AFFECTED_PRODUCTS:
Fortinet Forticlient,
Fortinet Forticlient,
Fortinet Forticlient
... (+1)
IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users.
AFFECTED_PRODUCTS:
IBM Openpages Grc Platform,
IBM Openpages With Watson
An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300. The bas...
An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300. The bas...
Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "full_value" buffer out of the smaller chunks. The full_value buffer has no siz...
Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors sendi...
A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiClientEMS versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.13, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8, 1.2.1 through 1.2.5 allows attacker to perform a denial of service, read or w...
AFFECTED_PRODUCTS:
Fortinet Forticlient Endpoint Management Server,
Fortinet Forticlient Endpoint Management Server,
Fortinet Forticlient Endpoint Management Server
... (+3)
An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.2.5 and FortiManager version 7.4.1 and before 7.2.5 may allow a remote attacker with low privileges to read sensitive data via a crafted HTTP request.
AFFECTED_PRODUCTS:
Fortinet FortiManager,
Fortinet FortiManager,
Fortinet Fortianalyzer
... (+2)
An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientLinux 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientAndroid 6.4 all version...
AFFECTED_PRODUCTS:
Fortinet Forticlient,
Fortinet Forticlient,
Fortinet Forticlient
... (+1)
MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This issue affected MongoDB Server v6.0 version 6.0.3.
AFFECTED_PRODUCTS:
MongoDB Mongodb
A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the `pkcs15-init` tool may lead to out-of-bound rights, possibly resulting in arbitrary code executi...
AFFECTED_PRODUCTS:
Red Hat Enterprise Linux,
Red Hat Enterprise Linux,
Red Hat Enterprise Linux
phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php.
AFFECTED_PRODUCTS:
Phpok Phpok
Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitive information via the "Pic/Indexes" interface