A vulnerability has been found in merge (affected version unknown) and classified as critical. Affected by this vulnerability is some unknown functionality of the component Object Prototype Handler. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com.
merge Object Prototype code injection [CVE-2021-3645]
- Virtual Patching
- September 10, 2021
- 2:04 pm
CVE-2023-2851 : AGT TECH CEPPATRON SQL INJECTION
Description Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in AGT Tech Ceppatron allows Command
CVE-2023-2868 : BARRACUDA EMAIL SECURITY GATEWAY UP TO 9.2.0.006 TAR FILE COMMAND INJECTION
Description A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions
CVE-2023-1424 : MITSUBISHI ELECTRIC MELSEC IQ-F PACKETS BUFFER OVERFLOW
Description Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU