Do Son CVE-2023-0045 impacts all Linux kernels without the installed patch. Patches for the security issues were released on January 12.
Vulnerability
CVE-2023-25135 has been described as a deserialisation issue that can be exploited by an unauthenticated attacker to execute arbitrary code
A PoC local privilege escalation exploit for the vulnerability tracked as CVE-2023-0179 (CVSS score: 7.8) has been detailed by TurtleARM.
The security researcher from Hacksysteam announced the release of PoC exploits code targeting the CVE-2023-21608 vulnerability.
An attacker could exploit the CVE-2023-22501 vulnerability to impersonate another user and gain access to a Jira Service Management instance.
CVE-2023-22952 (CVSS score of 8.8) affects SugarCRM which could allow a remote authenticated attacker to execute arbitrary code on the system
Tracked as CVE-2023-23924 (CVSS score: 10), the bug impacts all versions of the Dompdf library, including and below 2.0.1
Today, security researchers from Horizon3's Attack Team created a proof-of-concept (PoC) exploit for CVE-2022-31706.
Tracked as CVE-2022-27596 (CVSS score: 9.8), the security hole could allow a remote attacker to inject malicious code on vulnerable devices
CVE-2023-0558 and CVE-2023-0557 security flaws impact versions 1.2.5 and below of ContentStudio and were fully resolved with version 1.2.6.
CVE-2022-29841 was caused by a command that read files from a privileged location and created a system command without sanitizing the read data
The critical vulnerability tracked as CVE-2017-11357 is rated 9.8 out of 10 for severity on the CVSS scoring system, and was patched by Progress
Argo CD users are advised to update to a fixed version of the platform as soon as possible as no workarounds are available for CVE-2023-22482
A remote attacker could exploit CVE-2023-23560 to conduct an SSRF attack, allowing the attacker to execute arbitrary code on the system.
Tracked as CVE-2023-23504, the flaw concerns a heap underwrite vulnerability in the XNU kernel (OS used for a number of Apple products).
With a CVSS score of 9.8 and tracked as CVE-2022-31704, the first of the bugs is a remote code execution vulnerability affecting vRealize Log Insight
The PoC exploit targets CVE-2022-38181, a vulnerability that could allow a remote authenticated attacker to bypass security restrictions
CVE-2022-42856 vulnerability could allow a remote attacker to execute arbitrary code on the system, caused by a type confusion flaw in the WebKit component
The PoC exploit targets CVE-2022-42864, a vulnerability that could allow a remote attacker to execute arbitrary code on the system
Tracked as CVE-2023-22727 (Github CVSS score of 9.8), CakePHP is vulnerable to SQL injection, caused by un-sanitized user request data
CVE-2023-24059 allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023.
RubyGems ActiveRecord is vulnerable to SQL injection. Tracked as CVE-2023-22794, the flaw related to the sanitization of comments.