CVE-2024-0911 Indent: heap-based buffer overflow in set_buf_break()

A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crash...

Low: indent

Issue Overview: A flaw was found in Indent. This issue may allow a local user to use a specially-crafted file to trigger a heap-based buffer overflow, which can lead to an application crash. CVE-2024-0911 Affected Packages: indent Issue Correction: Run dnf update indent --releasever 2023.3.202402...

Low: indent

Issue Overview: A flaw was found in Indent. This issue may allow a local user to use a specially-crafted file to trigger a heap-based buffer overflow, which can lead to an application crash. CVE-2024-0911 Affected Packages: indent Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

Fedora 39 : indent (2024-bfd13103eb)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-bfd13103eb advisory. This release fixes a heap buffer underread in indent tool when processing a code in which an opening parenthesis follows a comment with a text. Tenable has...

Fedora 38 : indent (2024-74667e499e)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-74667e499e advisory. This release fixes a heap buffer underread in indent tool when processing a code in which an opening parenthesis follows a comment with a text. Tenable has...

CVE-2024-0911

creationtimestamp| type| source ---|---|--- 2024-01-31 05:37:02+00:00| seen| https://t.me/ctinow/176482 2024-02-06 16:22:06+00:00| seen| https://t.me/ctinow/180093 2024-02-19 07:46:14+00:00| seen| https://t.me/ctinow/187497...

CVE-2024-0911

A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crash. Mitigation Do not process untrusted files with the indent program...

CVE-2020-0911

creationtimestamp| type| source ---|---|--- 2023-07-07 07:00:04+00:00| seen| https://t.me/TopCyberTechNews/354 2023-10-10 10:24:58+00:00| seen| MISP/853d7bf0-0dde-4411-932c-73676b789a57 2024-10-31 15:27:49+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8634...

WordPress Shortcodes Ultimate Plugin < 5.12.8 Multiple Information Disclosure vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:getshortcodes:shortcodesultimate"; ifdescription...

CVE-2023-0911

creationtimestamp| type| source ---|---|--- 2023-03-20 21:04:33+00:00| seen| https://t.me/cibsecurity/60343...

CVE-2023-0911 Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure

The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not validate the user meta to be retrieved via the user shortcode, allowing any authenticated users such as subscriber to retrieve arbitrary user meta except the userpass, such as the user email and activati...

CVE-2023-0911

The CVE concerns the WordPress plugin Shortcodes Ultimate (before 5.12.8). The vulnerability arises because the plugin does not validate the user meta returned by the user shortcode, allowing any authenticated user (e.g., subscriber) to retrieve arbitrary user metadata (excluding user_pass), such...

WordPress Shortcodes Ultimate Plugin < 5.12.8 is vulnerable to Sensitive Data Exposure

Software Shortcodes Ultimate Type Plugin Vulnerable versions 5.12.8 Fixed in 5.12.8 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-0911 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 466e8901614e Credits Erwan LR WPScan Requir...

CVE-2022-0911

PIMCORE CROSS-SITE SCRIPTING (CVE-2022-0911): Multiple connected sources confirm a stored XSS in pimcore/pimcore prior to version 10.4.0. The vulnerability stems from improper handling/validation of user-supplied data in Objectbricks and output filtering, enabling client-side JavaScript execution...

CVE-2022-0911 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.4.0...

CVE-2022-0911 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.4.0...

CVE-2020-0911 Windows Modules Installer Elevation of Privilege Vulnerability

...

CVE-2020-0911 Windows Modules Installer Elevation of Privilege Vulnerability

...

CVE-2020-0911

CVE-2020-0911 describes an elevation-of-privilege vulnerability in Windows where the Windows Modules Installer improperly handles objects in memory. An attacker could exploit this by running a specially crafted application on a victim system to execute arbitrary code in an elevated context. The u...

SUSE SLES12 Security Update : libpng12 (SUSE-SU-2020:0911-1)

This update for libpng12 fixes the following issues : Security issue fixed : CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks bsc1141493. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...