Blosc C-Blosc2 Security Vulnerability

Blosc C-Blosc2 is a code library from the Blosc team that enables deep compression of binary data. The goal of the software is to reduce the size of large datasets on disk or in memory, to speed up memory-bound computations, and to support BloscLZ, a compression program based on FastLZ, LZ4 and...

PT-2023-25822 · C-Blosc2 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: C-blosc2 versions prior to 2.9.3 Description: The issue is related to a NULL pointer dereference in the ndlz/ndlz8x8.c file of C-blosc2. This occurs when a NULL pointer is passed to the memset function. Recommendations: For versions prior to...

Blosc C-Blosc2 Security Vulnerability

Blosc C-Blosc2 is a code library from the Blosc team that enables deep compression of binary data. The goal of the software is to reduce the size of large datasets on disk or in memory, speeding up memory-bound computations. The software supports BloscLZ, a compression program based on FastLZ, LZ...

CVE-2023-37186

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset...

CVE-2023-50829

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aerin Loan Repayment Calculator and Application Form allows Stored XSS.This issue affects Loan Repayment Calculator and Application Form: from n/a through 2.9.3...

PT-2023-31660 · Unknown · Aerin Loan Repayment Calculator/Application Form

Name of the Vulnerable Software and Affected Versions: Aerin Loan Repayment Calculator and Application Form versions n/a through 2.9.3 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means tha...

WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection

Software Welcart e-Commerce Type Plugin Vulnerable versions = 2.9.3 Fixed in 2.9.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50847 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 04a7c6fd4f27 Credits Muhammad Daffa Required privilege Editor...

WordPress Loan Repayment Calculator and Application Form Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)

Software Loan Repayment Calculator and Application Form Type Plugin Vulnerable versions = 2.9.3 Fixed in 2.9.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50829 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5f5a8e271e7e Credits DoYeon...

adam-assist (>=0.1.1 <=0.3.9), adam-core (>=0.3.0 <=0.5.5) +49 more potentially affected by CVE-2023-45805 via pdm (>=1.15.5 <=2.9.3)

pdm PYPI version =1.15.5, =0.1.1, =0.3.0, =0.0.1, =0.1.2, =0.3.5, =2.0.0rc0, =0.1.0, =0.1.2, =0.1.0, =0.2.0, =0.1.5, =0.3.0, =0.1.0, =1.0.28 and more Source cves: CVE-2023-45805 Source advisory: OSV:GHSA-J44V-MMF2-XVM9...

PT-2023-27958 · Unknown · Cimg Library

Name of the Vulnerable Software and Affected Versions: Cimg Library version 2.9.3 Description: An issue in the Cimg Library allows an attacker to obtain sensitive information via a crafted JPEG file. Recommendations: For version 2.9.3, at the moment, there is no information about a newer version...

CVE-2023-38889

An issue in Alluxio v.2.9.3 and before allows an attacker to execute arbitrary code via a crafted script to the username parameter of lluxio.util.CommonUtils.getUnixGroupsjava.lang.String...

Alluxio Code Injection Vulnerability

Alluxio is Alluxio's to increase the speed of end-to-end distributed machine learning in the cloud. A security vulnerability exists in Alluxio version 2.9.3 and earlier versions, which originates from a script that can execute arbitrary code on the username parameter of...

GHSA-MJMQ-GWGM-5QHM Apache MINA SSHD information disclosure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the root...

Sielco Radio Link 2.06 Remote Privilege Escalation

inpu...

Sielco Radio Link 2.06 Cookie Brute Force

Sielco Radio Link 2.06 'id' Cookie Brute Force Session Hijacking Vendor: Sielco S.r.l Product web page: https://www.sielco.org Affected version: 2.06 RTX19 2.05 RTX19 2.00 EXC19 1.60 RTX19 1.59 RTX19 1.55 EXC19 Summary: Sielco develops and produces radio links for all transmission and reception...

Sielco Radio Link 2.06 Cross Site Request Forgery

CSRF Add Admin: --------------- input type="hidden" name="user2...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41893)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41893 advisory. - TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListResize is given a...

OPENSUSE-SU-2023:0053-1 Security update for timescaledb

This update for timescaledb fixes the following issues: timescaledb was updated to version 2.9.3 - https://github.com/timescale/timescaledb/releases/tag/2.9.3 - enable postgresql15 build - https://github.com/timescale/timescaledb/releases/tag/2.9.2 -...

SUSE CVE-2015-7497

Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors...

SUSE CVE-2022-41902

TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We hav...