PT-2023-22969 · Apache · Iotdb-Web-Workbench

Name of the Vulnerable Software and Affected Versions: Apache IoTDB iotdb-web-workbench version 0.13.3 Description: The issue is related to an Incorrect Authorization vulnerability in the iotdb-web-workbench component of Apache IoTDB. This component provides a web console for the database and is ...

Advisory ROSA-SA-2021-1863

Software: libass 0.13.4 OS: Cobalt 7.9 CVE-ID: CVE-2020-24994 CVE-Crit: HIGH CVE-DESC: Stack overflow in the parsetag function in libass / assparse.c in libass before version 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file. CVE-STATUS: defau...

Pomerium Open Redirect Vulnerability (CNVD-2021-25956)

Pomerium is an identity agent that gives you secure access to internal applications. An open redirection vulnerability exists in versions of Pomerium prior to 0.13.4. No detailed vulnerability details are provided at this time...

CVE-2021-29651

Pomerium before 0.13.4 has an Open Redirect issue 1 of 2...

CVE-2021-29651

Pomerium before 0.13.4 has an Open Redirect issue 1 of 2...

PT-2021-18384 · Pomerium · Pomerium

Name of the Vulnerable Software and Affected Versions: Pomerium versions 0.10.0 through 0.13.3 Description: The issue is related to an Open Redirect in the user sign-in/out process. Some API endpoints under /.pomerium/ do not verify parameters with pomerium signature, which could allow modifying...

PT-2021-18383 · Pomerium · Pomerium

Name of the Vulnerable Software and Affected Versions: Pomerium versions prior to 0.13.4 Description: The issue allows an outside attacker to get a signed login URL that, upon visiting it, will redirect a victim to the attacker’s site, creating an Open Redirect problem and potentially leading to...

Unspecified vulnerability in vscode-shellcheck

vscode-shellcheck is open source an unofficial VS Code extension . A security vulnerability exists in versions of vscode-shellcheck prior to 0.13.4, which can be exploited by an attacker to execute arbitrary code on a system...

vscode-shellcheck 安全漏洞

vscode-shellcheck is open source an unofficial VS Code extension . A security vulnerability exists in versions of vscode-shellcheck prior to 0.13.4, which can be exploited by an attacker to execute arbitrary code on a system...

Denial of service

mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing iferror magic functions...

CVE-2016-7970

Buffer overflow in the calccoeff function in libass/assblur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors...

ALPINE-CVE-2016-7969

The wraplinessmart function in assrender.c in libass before 0.13.4 allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors, related to "0/3 line wrapping equalization."...

ALPINE-CVE-2016-7970

Buffer overflow in the calccoeff function in libass/assblur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors...

Fedora Update for libass FEDORA-2016-282507c3e9

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...