CVE-2023-29659

A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round function in box.cc, which causes a denial of service...

CVE-2023-29659

CVE-2023-29659 affects libheif 1.15.1 where a crafted HEIF image can trigger a segmentation fault via the heif::Fraction::round() path in box.cc, leading to denial of service. Connected advisories across major distros confirm this as a vulnerability in the library and reference various patches: D...

CVE-2022-29659

Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php...

CVE-2022-29659

CVE-2022-29659 concerns a SQL injection in Responsive Online Blog v1.0 exploitable via the id parameter in single.php . The issue arises from unsanitized input being incorporated into SQL queries, enabling an attacker to manipulate the database and potentially access or alter data. The vulnerabil...

ownCloud < 10.7 Information Disclosure Vulnerability

ownCloud is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

CVE-2021-29659

OwnCloud 10.7 is affected by an incorrect access control vulnerability in a related API endpoint that allows remote information disclosure. An attacker can enumerate all users in a single request by supplying three whitespace characters, and on large instances this may add unusual load. The conne...

CVE-2020-29659

creationtimestamp| type| source ---|---|--- 2020-12-09 20:32:48+00:00| seen| https://t.me/cibsecurity/17999 2020-12-09 20:35:50+00:00| seen| https://t.me/cibsecurity/18019 2020-12-09 20:44:42+00:00| seen| https://t.me/cibsecurity/18038 2020-12-09 21:02:27+00:00| seen| https://t.me/cibsecurity/180...

CVE-2020-29659

CVE-2020-29659 affects Flexense DupScout Enterprise 10.0.18, where a buffer overflow in the web server allows remote, unauthenticated code execution as SYSTEM by overflowing the sid parameter through GET /settings&sid=. The issue stems from improper handling of the sid parameter in the web server...