SUSE CVE-2018-18605

A heap-based buffer over-read issue was discovered in the function secmergehashlookup in merge.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31, because bfdaddmergesection mishandles section merges when size is not a multiple of entsize. A specially...

SUSE CVE-2018-19932

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the ISCONTAINEDBYLMA macro in elf.c...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1594 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.31)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2022-0538 Source advisory: OSV:GHSA-34WX-X2W9-VQM3...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1594 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.31)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2022-20612 Source advisory: OSV:GHSA-P92Q-7FHH-MQ35...

GHSA-F2RP-J8HV-G5GX Cross-site scripting in imgURL

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

Cross-site scripting in imgURL

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

CVE-2021-38713

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

CVE-2021-38713

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

CVE-2021-38713

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...

CVE-2021-38713

The CVE-2021-38713 entry concerns imgURL 2.31, where a cross-site scripting (XSS) vulnerability can be triggered via the X-Forwarded-For HTTP header. Public references and multiple security trackers (Red Hat, GHSA, OSV, NVD, CNVD, etc.) consistently describe imgURL 2.31 as vulnerable to XSS throu...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Introduction This repository was created f...

PT-2021-21824 · Microsoft · Onefuzz

Name of the Vulnerable Software and Affected Versions: OneFuzz versions 2.12.0 through 2.30.0 Description: The issue is related to an incomplete authorization check in OneFuzz, allowing an authenticated user from any Azure Active Directory tenant to make authorized API calls to a vulnerable OneFu...

HPESBHF04162 rev.1 - HPE OneView Global Dashboard Release 2.31, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView Global Dashboard - only 2.31 - only version 2.31 is impacted. The issue is resolved in 2.32. CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | -...

ASSA ABLOY Yale WIPC-303W Operating System OS Command Injection Vulnerability

ASSA ABLOY Yale WIPC-303W is a home smart camera from ASSA ABLOY, Sweden. The ASSA ABLOY Yale WIPC-303W 2.21 through 2.31 camera suffers from an operating system command injection vulnerability that stems from command injection in the HTTP API and is susceptible to Remote Command Execution RCE...

PT-2021-10950 · Yale · Yale Wipc-303W

Name of the Vulnerable Software and Affected Versions: Yale WIPC-303W versions 2.21 through 2.31 Description: The issue allows for remote command execution through command injection via the HTTP API. Recommendations: For versions 2.21 through 2.31, update to a version that is not affected by this...

D-link DSL-2888A 安全漏洞

The D-link DSL-2888A is a Unified Services Router from China AUO D-link. An information disclosure vulnerability exists in D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55, which originates from the disclosure of sensitive information in the response body, such as hashed admin...

PT-2020-5616 · D Link · D-Link Dsl-2888A

Name of the Vulnerable Software and Affected Versions: D-Link DSL-2888A versions prior to AU 2.31 V1.1.47ae55 Description: The issue is related to a lack of authentication functionality, allowing an attacker to assign a static IP address that was once used by a valid user. This can potentially le...

CVE-2020-1751

CVE-2020-1751 summary (glibc): An out-of-bounds write vulnerability in glibc prior to 2.31 affects the backtrace handling for signal trampolines on PowerPC. The implementation did not properly bound-check the array when storing the frame address, leading to potential denial of service or code exe...

CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...

CVE-2018-18309

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31. An invalid memory address dereference was discovered in readreloc in reloc.c. The vulnerability causes a segmentation fault and application crash, which leads to denial of service, a...