Archive
2 August 2023
Vulnerabilities first published on this day (UTC), newest first.
56 results · Feed
-
Critical 9.4
CVE-2023-1935
ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition.
-
Critical 9.8
CVE-2023-1437
All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote fi…
-
Unscored —
CVE-2023-3329
SpiderControl SCADA Webserver versions 2.08 and prior are vulnerable to path traversal. An attacker with administrative privileges could overwrite files on the webserver using the HMI's upload file feature. This could create size zero files anywhere on the we…
-
Medium 6.5
Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.
-
Medium 6.5
Excessive resource consumption in golang.org/x/image/tiff
The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height, and encoded size) to make the decoder decode large amounts of compressed dat…
-
Medium 6.1
Improper rendering of text nodes in golang.org/x/net/html
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.
-
Unscored —CVE-2023-29409 Public exploit
Large RSA keys can cause high CPU usage in crypto/tls
Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA…
-
Unscored —
This module enables you to add the Matomo web statistics tracking system to your website. The module does not check the…
-
Medium 5.4
BIG-IP Configuration utility vulnerability
A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical…
-
Medium 4.3
BIG-IP and BIG-IQ iControl SOAP vulnerability
An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
High 7.8
BIG-IP Edge Client for macOS vulnerability
The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
High 7.5
BIG-IP Configuration utility vulnerability
A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End o…
-
High 7.1
BIG-IP Edge Client for Windows and macOS vulnerability
An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify its configured server list. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluate…
-
Medium 4.4
F5OS-A vulnerability
Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
Medium 6.0
BIG-IP FIPS HSM password vulnerability CVE-2023-3470
Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account. The predictable nature of the password allows an authenticated user with TMSH access to the BIG-IP system, or anyone with physical a…
-
Low 3.1
IBM Robotic Process Automation information disclosure
IBM Robotic Process Automation 21.0.0 through 21.0.7.latest is vulnerable to unauthorized access to data due to insufficient authorization validation on some API routes. IBM X-Force ID: 245425.
-
High 8.1
IBM SDK, Java Technology Edition code execution
IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute a…
-
High 7.5
Functions with insufficient randomness were used to generate authorization tokens of the integrated oAuth Authorization…
-
Medium 5.4
The "OX Count" web service did not specify a media-type when processing responses by external resources. Malicious scri…
-
Medium 5.4
The "OX Chat" web service did not specify a media-type when processing responses by external resources. Malicious scrip…
-
Medium 5.4
Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handle…
-
Medium 5.4
The "upsell" widget for the portal allows to specify a product description. This description taken from a user-controll…
-
Medium 5.4
The users clientID at "application passwords" was not sanitized or escaped before being added to DOM. Malicious script …
-
Medium 5.4
Frontend themes are defined by user-controllable jslob settings and could point to a malicious resource which gets proc…
-
Medium 5.5
Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements. With existing sanitizat…
-
Low 3.2
In case Cacheservice was configured to use a sproxyd object-storage backend, it would follow HTTP redirects issued by t…
-
Medium 5.7
Cacheservice did not correctly check if relative cache object were pointing to the defined absolute location when acces…
-
High 7.1
The cacheservice API could be abused to indirectly inject parameters with SQL syntax which was insufficiently sanitized…
-
High 7.6
The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before get…
-
Medium 4.3
External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, in…
-
Low 3.5
Attackers with access to user accounts can inject arbitrary control characters to SIEVE mail-filter rules. This could b…
-
Medium 4.3
Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions
The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.
-
Medium 6.1
Bus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site Scripting
The Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_date' and 'tab_date_r' parameters in versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping…
-
Medium 4.3
Missing Authorization in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2, which leads to developers being able to create pipeline schedules on prot…
-
Medium 4.8
Improper Control of Generation of Code ('Code Injection') in GitLab
An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. The main branch of a repository with a specially designed name allows an attacker to cre…
-
Unscored —
Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the pr…
-
Medium 4.3
Allocation of Resources Without Limits or Throttling in GitLab
An issue has been discovered in GitLab EE affecting all versions from 15.11 prior to 16.2.2 which allows an attacker to spike the resource consumption resulting in DoS.
-
Medium 5.5
In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows en…
-
Low 2.5
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability …
-
Medium 5.5
In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoi…