20 matches found
CVE-2025-13308
creationtimestamp| type| source ---|---|--- 2025-12-06 09:43:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7cplmgjan2x...
Linux Distros Unpatched Vulnerability : CVE-2020-13308
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from...
CVE-2024-13308
creationtimestamp| type| source ---|---|--- 2025-01-09 20:34:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113800305235617163 2025-01-09 21:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlz3szkz27 2025-01-09 21:18:03+00:00| seen|...
CVE-2024-13308 Browser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Browser Back Button allows Cross-Site Scripting XSS.This issue affects Browser Back Button: from 1.0.0 before 2.0.2...
CVE-2024-13308
CVE-2024-13308 affects the Drupal Browser Back Button module. The vulnerability is an improper neutralization of input during web page generation (XSS) in the module’s back-button block, stemming from insufficient escaping of administrator-entered text. Affected versions: 1.0.0–2.0.2. Impact desc...
CVE-2017-13308
In tscpuwriteGPIOout and mtktsAbtswrite of mtktsAbts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2017-13308
In tscpuwriteGPIOout and mtktsAbtswrite of mtktsAbts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
GitLab 1.0 < 13.1.10 / 13.2 < 13.2.8 / 13.3 < 13.3.4 (CVE-2020-13308)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by being invited into a...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31496
OpenText Brava! Desktop 16.6.3.84 is affected by a DXF file parsing vulnerability that allows remote code execution. The issue stems from improper validation during DXF parsing, causing a write past the end of an allocated buffer (out-of-bounds write). Exploitation requires user interaction (visi...
UBUNTU-CVE-2020-13308
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by being invited into a project that had 2 factor authentication inheritance...
CVE-2020-13308
GitLab CVE-2020-13308 affects GitLab versions before 13.1.10, 13.2.8, and 13.3.4. A user without two‑factor authentication could be prohibited from accessing GitLab by being invited into a project that uses 2FA inheritance. Remediation is to upgrade to the fixed releases (13.1.10+, 13.2.8+, 13.3....
Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1806)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:2010-1)
This update for ImageMagick fixes the following issues : CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory bsc1140554. CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c bsc1140501. CVE-2019-13311: Fixed a memory leak at...
CVE-2019-13308
creationtimestamp| type| source ---|---|--- 2019-07-05 04:00:09+00:00| seen| https://t.me/cveNotify/230...
UBUNTU-CVE-2019-13308
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage...
CVE-2019-13308
CVE-2019-13308 is an ImageMagick issue: in ImageMagick 7.0.8-50 Q16, the ComplexImage path in MagickCore/fourier.c exposes a heap-based buffer overflow in the ComplexImage handling. The associated IBM bulletin lists this CVE among a set of ImageMagick/Red Hat–related flaws and notes a high-severi...
CVE-2018-13308
Cross-site scripting in noticegen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "User phrases button" field...
CVE-2018-13308
Cross-site scripting in noticegen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "User phrases button" field...
CVE-2018-13308
CVE-2018-13308 affects the TOTOLINK A3002RU router (firmware 1.0.8). The issue is a cross-site scripting vulnerability in the notice_gen.htm page, exploitable by modifying the "User phrases button" field to execute arbitrary JavaScript. The CVE descriptions in multiple sources confirm the vulnera...