Database CVE
Archivio delle vulnerabilità note (CVE) con punteggio CVSS, gravità, prodotti e vendor coinvolti. Filtra per anno e severità, collegato ai nostri articoli.
- CVE-2023-20887Critica9.8
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.
- CVE-2023-33538Alta8.8
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .
- CVE-2023-3079Alta8.8
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2023-34362Critica9.8
In Progress MOVEit Transfer prima di 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5) e 2023.0.1 (15.0.1), è stata trovata una vulnerabilità SQL injection nell'applicazione web MOVEit Transfer che potrebbe consentire a un attaccante non autenticato di ottenere l'accesso al database di MOVEit Transfer. A seconda del motore di database utilizzato (MySQL, Microsoft SQL Server o Azure SQL), un attaccante potrebbe essere in grado di dedurre informazioni sulla struttura e sul contenuto del database ed eseguire istruzioni SQL che alterano o eliminano elementi del database. NOTA: questa è sfruttata in the wild a maggio e giugno 2023; lo sfruttamento dei sistemi non aggiornati può avvenire tramite HTTP o HTTPS. Tutte le versioni (ad es. 2020.0 e 2019x) precedenti alle cinque versioni esplicitamente menzionate sono interessate, comprese le versioni precedenti non supportate.
- CVE-2023-32315Alta8.6
Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup Environment in an already configured Openfire environment to access restricted pages in the Openfire Admin Console reserved for administrative users. This vulnerability affects all versions of Openfire that have been released since April 2015, starting with version 3.10.0. The problem has been patched in Openfire release 4.7.5 and 4.6.8, and further improvements will be included in the yet-to-be released first version on the 4.8 branch (which is expected to be version 4.8.0). Users are advised to upgrade. If an Openfire upgrade isn’t available for a specific release, or isn’t quickly actionable, users may see the linked github advisory (GHSA-gw42-f939-fhvm) for mitigation advice.
- CVE-2023-2825Critica10.0
È stato scoperto un problema in GitLab CE/EE che interessa solo la versione 16.0.0. Un utente malevolo non autenticato può utilizzare una vulnerabilità di path traversal per leggere file arbitrari sul server quando esiste un allegato in un progetto pubblico annidato all'interno di almeno cinque gruppi.
- CVE-2023-2868Critica9.4
A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file (tape archives). The vulnerability stems from incomplete input validation of a user-supplied .tar file as it pertains to the names of the files contained within the archive. As a consequence, a remote attacker can specifically format these file names in a particular manner that will result in remotely executing a system command through Perl's qx operator with the privileges of the Email Security Gateway product. This issue was fixed as part of BNSF-36456 patch. This patch was automatically applied to all customer appliances.
- CVE-2023-33246Critica9.8
For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as. Additionally, an attacker can achieve the same effect by forging the RocketMQ protocol content. To prevent these attacks, users are recommended to upgrade to version 5.1.1 or above for using RocketMQ 5.x or 4.9.6 or above for using RocketMQ 4.x .
- CVE-2023-33010Critica9.8
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
- CVE-2023-33009Critica9.8
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.60 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
- CVE-2023-29336Alta7.8
Win32k Elevation of Privilege Vulnerability
- CVE-2023-24955Alta7.2
Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2023-21492Media4.4
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
- CVE-2023-29552Alta7.5
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
- CVE-2023-28771Critica9.8
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.
- CVE-2023-27524Alta8.9
Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config. All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database. Add a strong SECRET_KEY to your `superset_config.py` file like: SECRET_KEY = <YOUR_OWN_RANDOM_GENERATED_SECRET_KEY> Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.
- CVE-2023-27351Alta7.5
Questa vulnerabilità consente ad attaccanti remoti di bypassare l'autenticazione sulle installazioni interessate di PaperCut NG 22.0.5 (Build 63914). L'autenticazione non è richiesta per sfruttare questa vulnerabilità. Il difetto specifico esiste all'interno della classe SecurityRequestFilter. Il problema deriva da un'implementazione impropria dell'algoritmo di autenticazione. Un attaccante può sfruttare questa vulnerabilità per bypassare l'autenticazione sul sistema. Era ZDI-CAN-19226.
- CVE-2023-27350Critica9.8
Questa vulnerabilità consente ad attaccanti remoti di bypassare l'autenticazione sulle installazioni interessate di PaperCut NG 22.0.5 (Build 63914). Per sfruttare questa vulnerabilità non è richiesta l'autenticazione. La falla specifica esiste all'interno della classe SetupCompleted. Il problema deriva da un controllo degli accessi improprio. Un attaccante può sfruttare questa vulnerabilità per bypassare l'autenticazione ed eseguire codice arbitrario nel contesto di SYSTEM. Era ZDI-CAN-18987.
- CVE-2023-22894Media4.9
Strapi fino alla versione 4.5.5 consente agli aggressori (con accesso al pannello di amministrazione) di scoprire dettagli sensibili degli utenti sfruttando il filtro della query. L'aggressore può filtrare gli utenti in base alle colonne che contengono informazioni sensibili e dedurre un valore dalle risposte dell'API. Se l'aggressore dispone dell'accesso da super admin, può sfruttare questa vulnerabilità per scoprire l'hash della password e il token di reimpostazione della password di tutti gli utenti. Se l'aggressore ha accesso al pannello di amministrazione di un account autorizzato ad accedere al nome utente e all'indirizzo email degli utenti dell'API con un ruolo di privilegi inferiori (ad esempio, Editor o Author), può sfruttare questa vulnerabilità per scoprire informazioni sensibili su tutti gli utenti dell'API, ma non sugli altri account di amministrazione.
- CVE-2023-2136Critica9.6
Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
This product uses the NVD API but is not endorsed or certified by the NVD.