Pagina 2 – Azienda Sicura

Lista CVE 2023/26xxx

CVE-2023-26036 (ZoneMinder vulnerable to Missing Authorization)

CVE-2023-26037 (ZoneMinder contains Local File Inclusion vulnerability)

CVE-2023-26038 (ZoneMinder contains SQL Injection via report_event_audit)

CVE-2023-26039 (ZoneMinder contains Local File Inclusion vulnerability via `web/ajax/modal.php`)

CVE-2023-26040 (ZoneMinder vulnerable to OS Command injection in daemonControl() API)

CVE-2023-26041 (Discourse chat messages susceptible to Cross-site Scripting through chat excerpts)

CVE-2023-26042 (Nextcloud Talk messages can still be seen on conversation after expiring when cron is misconfigured)

CVE-2023-26043 (HTML/XSS injection possibilities in Part-DB )

CVE-2023-26044 (XML External Entity (XXE) injection in GeoServer style upload functionality)

CVE-2023-26045 (ReactPHP’s HTTP server continues parsing unused multipart parts after reaching limits)

CVE-2023-26046 (NodeBB vulnerable to path traversal and code execution via prototype vulnerability)

CVE-2023-26047 (teler-waf subject to bypass of common web attack threat rule with HTML entities payload)

CVE-2023-26048 (teler-waf contains detection rule bypass via entities payload)

CVE-2023-26049 (OutOfMemoryError for large multipart without filename in Eclipse Jetty)

CVE-2023-26051 (Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty)

CVE-2023-26052 (Saleor is vulnerable to staff-authenticated error message information disclosure vulnerability via Python exceptions)

CVE-2023-26053 (Saleor is vulnerable to unauthenticated information disclosure via Python exceptions)

CVE-2023-26054 (Gradle usage of long IDs for PGP keys opens potential for collision attacks)

CVE-2023-26055 (Credentials inlined to Git URLs could end up in provenance attestation in BuildKit)

CVE-2023-26056 (XWiki Commons may allow privilege escalation to programming rights via user’s first name)

CVE-2023-26057 (XWiki Platform allows macro execution as any user without programming rights through the context macro)