Archive
25 October 2023
Vulnerabilities first published on this day (UTC), newest first.
103 results · Clear filters · Feed
-
High 8.2
Palantir Tiles missing authentication on API endpoints
The Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not performing authentication/authorization on all the endpoints.
-
High 7.5
gRPC-Go HTTP/2 Rapid Reset vulnerability
### Impact In affected releases of gRPC-Go, it is possible for an attacker to send HTTP/2 requests, cancel them, and send subsequent requests, which is valid by the HTTP/2 protocol, but would cause the gRPC-Go server to launch more concurrent method handlers …
-
High 7.0
Xorg-x11-server: use-after-free bug in damagedestroy
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a sc…
-
High 7.8
Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty
A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty func…
-
High 7.6
Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation
Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.
-
High 7.6CVE-2023-5043 Public exploit
Ingress nginx annotation injection causes arbitrary command execution
Ingress nginx annotation injection causes arbitrary command execution.
-
High 8.8
Ingress-nginx `path` sanitization can be bypassed with `log_format` directive
Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.
-
High 8.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…
-
High 7.5
The issue was addressed with improved UI handling. This issue is fixed in iOS 17.1 and iPadOS 17.1. A device may persis…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17…
-
High 8.1
org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with the introduction of attachment move support in version 14.0-rc-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, an attacker with edit…
-
High 8.8
Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit he…
-
High 8.8
iTop XSS vulnerability on pages/UI.php
iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on `pages/UI.php`, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0.
-
High 8.8
iTop XSS vulnerability on pages/preferences.php
iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, when displaying `pages/preferences.php`, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0.
-
High 7.5
EisBaer Scada - CWE-749: Exposed Dangerous Method or Function
EisBaer Scada - CWE-749: Exposed Dangerous Method or Function
-
High 7.1
EisBaer Scada - CWE-256: Plaintext Storage of a Password
EisBaer Scada - CWE-256: Plaintext Storage of a Password
-
High 7.1
EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key
EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key
-
High 7.5
EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
-
High 7.5
EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource
EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource
-
High 7.2
A remote code execution issue exists in HPE OneView.
-
High 7.5
EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
-
High 8.8
EisBaer Scada - CWE-285: Improper Authorization
EisBaer Scada - CWE-285: Improper Authorization
-
High 8.8
The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and…
-
High 8.8
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any ser…
-
High 8.3
The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address…
-
High 8.8
The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address)…
-
High 7.8
The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings o…
-
High 7.1
The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafel…
-
High 8.8
The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on …
-
High 8.0
Jenkins Edgewall Trac Plugin vulnerable to Stored XSS
Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
-
High 8.0
Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion
Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory during the cleanup process of the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to delete arbit…
-
High 8.0
Stored XSS vulnerability in Jenkins GitHub Plugin
Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
-
High 7.9
The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be d…
-
High 7.3
The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an a…
-
High 7.8CVE-2023-5717 Public exploit
Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component
A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation. If perf_read_group() is called while an event's sibling_list is smaller than its child's si…
-
High 7.5
Reflected Cross-site Scripting In IDAttend’s IDWeb Application
Reflected cross-site scripting in the StudentSearch component in IDAttend’s IDWeb application 3.1.052 and earlier allows hijacking of a user’s browsing session by attackers who have convinced the said user to click on a malicious link.
-
High 7.5
Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution
An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the …
-
High 7.5
Missing Authentication In IDAttend’s IDWeb Application
Missing authentication in the StudentPopupDetails_EmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers.
-
High 7.5
Missing Authentication In IDAttend’s IDWeb Application
Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers.
-
High 7.5
Missing Authentication In IDAttend’s IDWeb Application
Missing authentication in the StudentPopupDetails_ContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers.