80 matches found
CVE-2026-2971 a466350665 Smart-SSO Login login.html cross site scripting
A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login.html of the component Login. Performing a manipulation of the argument redirectUri results in cross site scripting. T...
EUVD-2026-2971
Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...
Fedora 42 : texlive-base / xpdf (2025-e72c726192)
The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-e72c726192 advisory. Update to 4.06. Lots of bugfixes, but notably, security fixes for the following CVEs: CVE-2024-2971 CVE-2024-3247 CVE-2024-3248 CVE-2024-3900...
Slackware: Security Advisory (SSA:2025-319-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2024-2971
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file. CVE-2024-2971 Note that...
Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2025-2971)
The version of gstreamer1-plugins-base installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2971 advisory. GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability h...
CVE-2023-2971
Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text fro...
CVE-2020-2971
Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...
CVE-2019-2971
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...
CVE-2025-2971
creationtimestamp| type| source ---|---|--- 2025-03-31 02:30:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9565 2025-03-31 04:57:54+00:00| seen| https://t.me/cvedetector/21532...
CVE-2025-2971
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Linux Distros Unpatched Vulnerability : CVE-2010-2971
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote...
Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries
Details have emerged about multiple security vulnerabilities in two implementations of the Manufacturing Message Specification MMS protocol that, if successfully exploited, could have severe impacts in industrial environments. "The vulnerabilities could allow an attacker to crash an industrial...
CVE-2024-2971
Xpdf vulnerability CVE-2024-2971 affects Xpdf 4.05 and earlier, caused by an out-of-bounds write in an array triggered by a negative object number in an indirect reference in the input PDF. Fedora advisories and security notes indicate update to 4.06 as the fix. If exploiting, the issue could imp...
CVE-2024-2971 Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...
CVE-2024-2971 Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file...
CVE-2019-2971
creationtimestamp| type| source ---|---|--- 2024-01-09 15:17:22+00:00| seen| https://t.me/ctinow/165053...
CVE-2023-2971
creationtimestamp| type| source ---|---|--- 2023-08-19 12:39:00+00:00| seen| https://t.me/cibsecurity/68858 2023-11-29 13:07:18+00:00| seen| https://t.me/arpsyndicate/739...
CVE-2023-2971
Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text fro...