‼ CVE-2023-31567 ‼
📖 Read
via "National Vulnerability Database".
Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30352 ‼
📖 Read
via "National Vulnerability Database".
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed.📖 Read
via "National Vulnerability Database".
❤1
‼ CVE-2023-31555 ‼
📖 Read
via "National Vulnerability Database".
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31566 ‼
📖 Read
via "National Vulnerability Database".
Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted().📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31557 ‼
📖 Read
via "National Vulnerability Database".
xpdf pdfimages v4.04 was discovered to contain a stack overflow in the component Catalog::readEmbeddedFileTree(Object*). This vulnerability allows attackers to cause a Denial of Service (DoS).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2630 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31556 ‼
📖 Read
via "National Vulnerability Database".
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46378 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no port argument is provided to the `PORT` command.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30354 ‼
📖 Read
via "National Vulnerability Database".
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30353 ‼
📖 Read
via "National Vulnerability Database".
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0007 ‼
📖 Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authenticated read-write administrator to store a JavaScript payload in the web interface that will execute in the context of another administrator’s browser when viewed.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2629 ‼
📖 Read
via "National Vulnerability Database".
Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31568 ‼
📖 Read
via "National Vulnerability Database".
Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31554 ‼
📖 Read
via "National Vulnerability Database".
xpdf pdfimages v4.04 was discovered to contain a stack overflow in the component Catalog::readPageLabelTree2(Object*). This vulnerability allows attackers to cause a Denial of Service (DoS).📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41985 ‼
📖 Read
via "National Vulnerability Database".
An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00. A specially crafted set of network packets can lead to authentication bypass and denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0008 ‼
📖 Read
via "National Vulnerability Database".
A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with access to the web interface to export local files from the firewall through a race condition.📖 Read
via "National Vulnerability Database".
🕴 Sysco Data Breach Exposes Customer, Employee Data 🕴
📖 Read
via "Dark Reading".
Food distribution company first learned of the cyberattack in March 2023.📖 Read
via "Dark Reading".
Dark Reading
Sysco Data Breach Exposes Customer, Employee Data
Food distribution company first learned of the cyberattack in March 2023.
🕴 Dark Reading Goes Global 🕴
📖 Read
via "Dark Reading".
While the goal of the site's new DR Global section is to expand international coverage, the initial focus will be cybersecurity professionals in the Middle East and Africa.📖 Read
via "Dark Reading".
Dark Reading
Dark Reading Goes Global
While the goal of the site's new DR Global section is to expand international coverage, the initial focus will be cybersecurity professionals in the Middle East and Africa.
🕴 Microsoft Fixes Failed Patch for Exploited Outlook Vulnerability 🕴
📖 Read
via "Dark Reading".
Adding a single character to a function in the previous Outlook patch rendered that fix useless, researchers say.📖 Read
via "Dark Reading".
Dark Reading
Microsoft Fixes Failed Patch for Exploited Outlook Vulnerability
Adding a single character to a function in the previous Outlook patch rendered that fix useless, researchers say.
‼ CVE-2023-32070 ‼
📖 Read
via "National Vulnerability Database".
XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XWiki 14.6-rc-1. There are no known workarounds apart from upgrading to a fixed version.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36937 ‼
📖 Read
via "National Vulnerability Database".
HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension. TLS1.0 has numerous published vulnerabilities and is deprecated. HHVM 4.153.4, 4.168.2, 4.169.2, 4.170.2, 4.171.1, 4.172.1, 4.173.0 replaces TLS1.0 with TLS1.3.Applications that call stream_socket_server or stream_socket_client functions with a URL starting with tls:// are affected.📖 Read
via "National Vulnerability Database".