IT-Sentinel

> CVE-2018-16153 [HIGH 7.5]

[PUBLISHED: 2023-12-12] [EPSS 0.83%]

An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations.

AFFECTED_PRODUCTS: Apereo Opencast

> CVE-2015-8314 [HIGH 7.5]

[PUBLISHED: 2023-12-12] [EPSS 0.62%]

The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access.

AFFECTED_PRODUCTS: Heartcombo Devise

> CVE-2015-2179 [MEDIUM 5.5]

[PUBLISHED: 2023-12-12] [EPSS 0.37%]

The xaviershay-dm-rails gem 0.10.3.8 for Ruby allows local users to discover MySQL credentials by listing a process and its arguments.

AFFECTED_PRODUCTS: Xaviershay-Dm-Rails Porject Xaviershay Dm Rails

> CVE-2013-2513 [CRITICAL 9.8]

[PUBLISHED: 2023-12-12] [EPSS 1.69%]

The flash_tool gem through 0.6.0 for Ruby allows command execution via shell metacharacters in the name of a downloaded file.

AFFECTED_PRODUCTS: Milboj Flash Tool

> CVE-2009-4123 [HIGH 7.5]

[PUBLISHED: 2023-12-12] [EPSS 0.60%]

The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.

AFFECTED_PRODUCTS: Jruby Jruby Openssl

> CVE-2023-6593 [CRITICAL 9.8]

[PUBLISHED: 2023-12-12] [EPSS 0.73%]

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction.

AFFECTED_PRODUCTS: Devolutions Remote Desktop Manager

> CVE-2023-50495 [MEDIUM 6.5]

[PUBLISHED: 2023-12-12] [EPSS 1.04%]

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

AFFECTED_PRODUCTS: Invisible-Island Ncurse

> CVE-2023-46456 [CRITICAL 9.8]

[PUBLISHED: 2023-12-12] [⚡ EPSS 24.7%]

In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.

AFFECTED_PRODUCTS: Gl-Inet Gl Ar300m Firmware

> CVE-2023-46455 [HIGH 7.5]

[PUBLISHED: 2023-12-12] [⚡ EPSS 47.0%] [🎯 NUCLEI]

In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload functionality.

AFFECTED_PRODUCTS: Gl-Inet Gl Ar300m Firmware

> CVE-2023-46454 [CRITICAL 9.8]

[PUBLISHED: 2023-12-12] [⚡ EPSS 23.5%]

In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality.

AFFECTED_PRODUCTS: Gl-Inet Gl Ar300m Firmware

> CVE-2020-28369 [HIGH 7.8]

[PUBLISHED: 2023-12-12] [EPSS 0.23%]

In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp.

AFFECTED_PRODUCTS: Beyondtrust Privilege Management For Windows

> CVE-2020-12614 [HIGH 7.8]

[PUBLISHED: 2023-12-12] [EPSS 0.14%]

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher that must be present in the certificate (and also requires that the certificate is valid). If an Add Admin token is protected by this criteri...

AFFECTED_PRODUCTS: Beyondtrust Privilege Management For Windows

> CVE-2023-6193 [MEDIUM 5.3]

[PUBLISHED: 2023-12-12] [EPSS 0.76%]

quiche v. 0.15.0 through 0.19.0 was discovered to be vulnerable to unbounded queuing of path validation messages, which could lead to excessive resource consumption. QUIC path validation (RFC 9000 Section 8.2) requires that the recipient of a PATH_CHALLENGE frame responds by sending a PATH_RESPONSE....

AFFECTED_PRODUCTS: Cloudflare Quiche

> CVE-2023-49994 [MEDIUM 5.5]

[PUBLISHED: 2023-12-12] [EPSS 0.38%]

Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.

AFFECTED_PRODUCTS: Espeak-Ng Espeak Ng

> CVE-2023-49993 [MEDIUM 5.3]

[PUBLISHED: 2023-12-12] [EPSS 0.40%]

Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at readclause.c.

AFFECTED_PRODUCTS: Espeak-Ng Espeak Ng

> CVE-2023-49992 [MEDIUM 5.3]

[PUBLISHED: 2023-12-12] [EPSS 0.40%]

Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c.

AFFECTED_PRODUCTS: Espeak-Ng Espeak Ng

> CVE-2023-49991 [MEDIUM 5.3]

[PUBLISHED: 2023-12-12] [EPSS 0.37%]

Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c.

AFFECTED_PRODUCTS: Espeak-Ng Espeak Ng

> CVE-2023-49990 [MEDIUM 5.3]

[PUBLISHED: 2023-12-12] [EPSS 0.40%]

Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c.

AFFECTED_PRODUCTS: Espeak-Ng Espeak Ng

> CVE-2020-12612 [HIGH 7.8]

[PUBLISHED: 2023-12-12] [EPSS 0.26%]

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When specifying a program to elevate, it can typically be found within the Program Files (x86) folder and therefore uses the %ProgramFiles(x86)% environment variable. However, when this same policy gets pushed to a...

AFFECTED_PRODUCTS: Beyondtrust Privilege Management For Windows, Beyondtrust Privilege Management For Windows

> CVE-2020-12615 [HIGH 7.8]

[PUBLISHED: 2023-12-12] [EPSS 0.22%]

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes.

AFFECTED_PRODUCTS: Beyondtrust Privilege Management For Windows, Beyondtrust Privilege Management For Windows

> CVE-2023-49692 [HIGH 7.2]

[PUBLISHED: 2023-12-12] [EPSS 0.62%]

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (...

AFFECTED_PRODUCTS: Siemens 6gk6108 4am00 2ba2 Firmware, Siemens 6gk6108 4am00 2da2 Firmware, Siemens 6gk5804 0ap00 2aa2 Firmware ... (+17)

> CVE-2023-49691 [HIGH 7.2]

[PUBLISHED: 2023-12-12] [EPSS 0.64%]

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.0), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All ve...

AFFECTED_PRODUCTS: Siemens 6gk6108 4am00 2ba2 Firmware, Siemens 6gk6108 4am00 2da2 Firmware, Siemens 6gk5804 0ap00 2aa2 Firmware ... (+17)

> CVE-2023-48431 [MEDIUM 6.8]

[PUBLISHED: 2023-12-12] [EPSS 0.62%]

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected software does not correctly validate the response received by an UMC server. An attacker can use this to crash the affected software by providing and configuring a malicious UMC server or by manipulating th...

AFFECTED_PRODUCTS: Siemens Sinec Ins, Siemens Sinec Ins

> CVE-2023-48430 [LOW 2.7]

[PUBLISHED: 2023-12-12] [EPSS 0.59%]

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices does not check the length of parameters in certain conditions. This allows a malicious admin to crash the server by sending a crafted request to the API. The server will automaticall...

AFFECTED_PRODUCTS: Siemens Sinec Ins, Siemens Sinec Ins

> CVE-2023-48429 [LOW 2.7]

[PUBLISHED: 2023-12-12] [EPSS 0.59%]

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices does not check the length of parameters in certain conditions. This allows a malicious admin to crash the server by sending a crafted request to the server. The server will automatical...

AFFECTED_PRODUCTS: Siemens Sinec Ins, Siemens Sinec Ins

> CVE-2023-48428 [HIGH 7.2]

[PUBLISHED: 2023-12-12] [EPSS 0.59%]

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service condition or potentially...

AFFECTED_PRODUCTS: Siemens Sinec Ins, Siemens Sinec Ins

> CVE-2023-48427 [HIGH 8.1]

[PUBLISHED: 2023-12-12] [EPSS 0.45%]

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly validate the certificate of the configured UMC server. This could allow an attacker to intercept credentials that are sent to the UMC server as well as to manipulate responses, pote...

AFFECTED_PRODUCTS: Siemens Sinec Ins, Siemens Sinec Ins

> CVE-2023-46285 [HIGH 7.5]

[PUBLISHED: 2023-12-12] [EPSS 0.91%]

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated A...