WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service

...

Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service via a crafted file.

...

Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service

...

Heap-based buffer overflow in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service

...

The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.

...

Linux Distros Unpatched Vulnerability : CVE-2020-35906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the futures-task crate before 0.3.6 for Rust. futurestask::waker may cause a use-after-free in a non-static type situation...

WordPress AnyComment plugin <= 0.3.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin AnyComment versions = 0.3.6...

CVE-2024-51930

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IronFeet Custom URL Shortener custom-url-shorter allows Stored XSS.This issue affects Custom URL Shortener: from n/a through = 0.3.6...

OPENSUSE-SU-2025:15150-1 audiofile-0.3.6-16.1 on GA media

These are all security issues fixed in the audiofile-0.3.6-16.1 package on the GA media of openSUSE Tumbleweed...

CVE-2019-19328

ui/editor/tooltip/Rdf.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection in tooltips for entities. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT...

Uncontrolled Recursion

Overview llama-index-readers-web is a llama-index readers web integration Affected versions of this package are vulnerable to Uncontrolled Recursion due to improper handling of the maxdepth parameter in the getarticleurls function. An attacker can exhaust system resources and crash the applicatio...

OPENSUSE-SU-2025:15050-1 audiofile-0.3.6-15.1 on GA media

These are all security issues fixed in the audiofile-0.3.6-15.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-9312

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges...

CVE-2017-6838 affecting package audiofile 0.3.6-27

CVE-2017-6838 affecting package audiofile 0.3.6-27. No patch is available currently...

CVE-2017-6835 affecting package audiofile 0.3.6-27

CVE-2017-6835 affecting package audiofile 0.3.6-27. No patch is available currently...

CVE-2017-6833 affecting package audiofile 0.3.6-27

CVE-2017-6833 affecting package audiofile 0.3.6-27. No patch is available currently...

CVE-2017-6831 affecting package audiofile 0.3.6-27

CVE-2017-6831 affecting package audiofile 0.3.6-27. No patch is available currently...

CVE-2017-6829 affecting package audiofile 0.3.6-27

CVE-2017-6829 affecting package audiofile 0.3.6-27. No patch is available currently...

WordPress plugin Custom URL Shortener 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Custom URL Shortener Plugin <= 0.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Custom URL Shortener Type Plugin Vulnerable versions = 0.3.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51930 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 721373a7389e Credits SOPROBRO Required privilege...