| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35466 | 10.0 | The Blackfire Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Blackfire container may allow a remote attacker to achieve root access with a blank password. | 2023-09-26 17:46:00 | 2020-12-15 23:15:00 |
| CVE-2023-4258 | 6.5 | In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sent back and will be accepted by provisionee. | 2023-09-26 17:19:00 | 2023-09-25 22:15:00 |
| CVE-2023-35002 | 9.8 | A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerabili | 2023-09-26 16:31:00 | 2023-09-25 16:15:00 |
| CVE-2023-32653 | 8.8 | An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this v | 2023-09-26 16:26:00 | 2023-09-25 16:15:00 |
| CVE-2023-42817 | 5.4 | Pimcore admin-ui-classic-bundle provides a Backend UI for Pimcore. The translation value with text including “%s” (from “%suggest%) is parsed by sprintf() even though it’s supposed to be output literally to the user. The translations may be accessibl | 2023-09-26 15:57:00 | 2023-09-25 19:15:00 |
| CVE-2023-5166 | 6.5 | Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0. | 2023-09-26 15:51:00 | 2023-09-25 16:15:00 |
| CVE-2023-5165 | 8.8 | Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible for a short time window after launching Docker Desktop. The affected functionality is avai | 2023-09-26 15:50:00 | 2023-09-25 16:15:00 |
| CVE-2023-43642 | 7.5 | snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing | 2023-09-26 15:46:00 | 2023-09-25 20:15:00 |
| CVE-2023-43644 | 9.8 | Sing-box is an open source proxy system. Affected versions are subject to an authentication bypass when specially crafted requests are sent to sing-box. This affects all SOCKS5 inbounds with user authentication and an attacker may be able to bypass a | 2023-09-26 15:45:00 | 2023-09-25 20:15:00 |
| CVE-2023-43763 | 6.1 | Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux. | 2023-09-26 15:17:00 | 2023-09-22 05:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: