CVE-2023-23788

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Florin Arjocu Custom More Link Complete plugin = 1.4.1 versions...

PT-2023-18499 · Seiko Solutions · Seiko Solutions Skybridge Mb-A200 +1

Name of the Vulnerable Software and Affected Versions: Seiko Solutions SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier Seiko Solutions SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier Description: A missing authentication issue for a critical function exists in the Seiko Solutions...

Seiko Solutions SkyBridge 信任管理问题漏洞

Seiko Solutions SkyBridge is a series of routers from Seiko Solutions, Japan. A security vulnerability exists in Seiko Solutions SkyBridge MB-A200 firmware version 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware version 1.4.1 and earlier. An attacker could exploit the vulnerability to...

OESA-2023-1255 protobuf-c security update

This is protobuf-c, a C implementation of the Google Protocol Buffers data serialization format. Security Fixes: protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember.CVE-2022-48468...

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3.

...

Insecure header validation in slim/psr7

Impact An attacker could sneak in a newline \n into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. An attacker that is able to control the header names that are passed to Slilm-Ps...

AZL-26159 CVE-2022-48468 affecting package protobuf-c for versions less than 1.4.1-1

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

UBUNTU-CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

CVE-2023-29598

lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php...

protobuf-c 输入验证错误漏洞

protobuf-c is a C-based protocol buffer implementation. A security vulnerability exists in protobuf-c versions prior to 1.4.1, which stems from the presence of an unsigned integer overflow...

CVE-2023-29598

lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php...

PT-2023-3201 · Unknown +7 · Protobuf-C +7

Name of the Vulnerable Software and Affected Versions: protobuf-c versions prior to 1.4.1 Description: The issue is related to an unsigned integer overflow in the parse required member function of the protobuf-c protocol serialization data. This can be exploited by a remote attacker to execute...

PT-2023-22329 · Lmxcms · Lmxcms

Name of the Vulnerable Software and Affected Versions: lmxcms version 1.4.1 Description: The issue is a SQL injection vulnerability. It can be exploited via the setbook parameter at the "index.php" endpoint. Recommendations: For lmxcms version 1.4.1, consider restricting access to the setbook...

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

KDAB Hotspot 竞争条件问题漏洞

KDAB Hotspot is an application for KDAB individual developers. Create a standalone GUI for performance data. A security vulnerability exists in KDAB Hotspot version 1.3.x and 1.4.1 and prior versions 1.4.x. The vulnerability stems from the presence of a race condition that can be exploited by an...

CVE-2023-0419 Shortcode for Font Awesome < 1.4.1 - Contributor+ Stored XSS

The Shortcode for Font Awesome WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedded, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

SUSE CVE-2004-0078

Buffer overflow in the index menu code menupadstring of menu.c for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via certain mail messages...

SUSE CVE-2005-1174

MIT Kerberos 5 krb5 1.3 through 1.4.1 Key Distribution Center KDC allows remote attackers to cause a denial of service application crash via a certain valid TCP connection that causes a free of unallocated memory...

SUSE CVE-2005-1689

Double free vulnerability in the krb5recvauth function in MIT Kerberos 5 krb5 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions...

SUSE CVE-2012-3443

The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service memory consumption by uploading an image file...