SUSE CVE-2019-17365

Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable...

heap-buffer-overflow in function gf_m2ts_process_tdt_tot media_tools/mpegts.c

Version ./MP4Box -version MP4Box - GPAC version 2.3-DEV-rev40-g3602a5ded-master c 2000-2023 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Please cite our work in your research: GPAC Filters: https://doi.org/10.1145/3339825.3394929 GPAC: https://doi.org/10.1145/1291233.1291452 GPAC...

CVE-2023-23143

Buffer overflow vulnerability in function avcparseslice in file mediatools/avparsers.c. GPAC version 2.3-DEV-rev1-g4669ba229-master...

CVE-2023-23143

GPAC multimedia framework (GPAC 2.3-DEV-rev1-g4669ba229-master) contains a buffer overflow in avc_parse_slice() inside media_tools/av_parsers.c. The CVE-2023-23143 issue has high impact (local access, requires user interaction per NVD) and may allow denial of service or arbitrary code execution. ...

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev1-g4669ba229-master, which stems from the discovery of a contained buffer overflow vulnerability via the avcparseslice function in mediatools/avparsers.c...

CVE-2016-15006 enigmaX Scrambling Table main.c getSeed prng seed

A vulnerability, which was classified as problematic, has been found in enigmaX up to 2.2. This issue affects the function getSeed of the file main.c of the component Scrambling Table Handler. The manipulation leads to predictable seed in pseudo-random number generator prng. The attack may be...

Rocky Linux 8 : dovecot (RLSA-2022:7623)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7623 advisory. - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args...

com.blazemeter:jmeter-plugins-directory-listing (>=0.2 <=0.3), com.blazemeter:jmeter-plugins-random-csv-data-set (>=0.6 <=0.8) +134 more potentially affected by CVE-2022-45378 via soap:soap (>=2.3 <=2.3.1)

soap:soap MAVEN version =2.3, =0.2, =0.6, =0.3, =1.0.0, =0.0.0, =0.0.0, =1.3.1-2.6, =1.4, =1.0.0-2.13, =1.1.0, =1.0.0, =1.1.3 and more Source cves: CVE-2022-45378 Source advisory: OSV:GHSA-789V-H9HW-38PG...

PT-2022-22023 · WordPress · Chat Bubble

Name of the Vulnerable Software and Affected Versions: Chat Bubble WordPress plugin versions prior to 2.3 Description: The issue allows unauthenticated attackers to set Stored Cross-Site Scripting payloads in some contact parameters, which will trigger when an admin views the related contact...

Design/Logic Flaw

Hyperledger Fabric 2.3 allows attackers to cause a denial of service orderer crash by repeatedly sending a crafted channel tx with the same Channel name. NOTE: the official Fabric with Raft prevents exploitation via a locking mechanism and a check for names that already exist...

Hyperledger Fabric 资源管理错误漏洞

Hyperledger Fabric is an enterprise licensed distributed ledger framework. It is used to develop solutions and applications. A security vulnerability exists in Hyperledger Fabric version 2.3 that stems from the fact that it allows an attacker to cause a denial of service by repeatedly sending a...

PT-2022-27260 · WordPress · Simple Video Embedder

Name of the Vulnerable Software and Affected Versions: Simple Video Embedder plugin versions prior to 2.3 Description: A Stored Cross-Site Scripting XSS issue exists, allowing attackers to inject malicious scripts. This can be exploited by contributors or those with higher access levels...

CVE-2022-33874

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in SSH login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in the...

PT-2022-6310 · Ibm · Ibm Cloud Pak For Multicloud Management Monitoring

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Multicloud Management Monitoring versions 2.0 through 2.3 Description: The issue is related to incorrect restriction of a directory path with limited access. Exploitation of this issue may allow a remote attacker to elevate...

DEBIAN-CVE-2022-35020

Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component interceptormemcpy at /sanitizercommon/sanitizercommoninterceptors.inc...

AZL-43723 CVE-2022-35017 affecting package advancecomp 2.5-1

Advancecomp v2.3 was discovered to contain a heap buffer overflow...

UBUNTU-CVE-2022-35020

Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component interceptormemcpy at /sanitizercommon/sanitizercommoninterceptors.inc...

AdvanceCOMP 缓冲区错误漏洞

AdvanceCOMP is a cross-platform command line tool for data compression. The product is capable of optimizing compressed files and reducing their size. A security vulnerability exists in AdvanceCOMP v2.3, which stems from the inclusion of a heap buffer overflow...

PT-2022-22496 · Unknown +4 · Advancecomp +4

Name of the Vulnerable Software and Affected Versions: Advancecomp version 2.3 Description: A segmentation fault was discovered in Advancecomp. The issue is related to bugs and security issues that have been fixed in an update. Recommendations: For Advancecomp version 2.3, update to a newer versi...

PT-2022-22494 · Unknown +4 · Advancecomp +4

Name of the Vulnerable Software and Affected Versions: Advancecomp version 2.3 Description: A heap buffer overflow issue was discovered in Advancecomp. The software has been updated to fix several bugs and security issues. Recommendations: For Advancecomp version 2.3, update to a newer version th...