1736 matches found
PT-2023-4667 · Freerdp · Freerdp
Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 3.0.0-beta3 Description: The issue is related to a Use-After-Free in processing RDPGFX CMDID RESETGRAPHICS packets. If context-maxPlaneSize is 0, context-planesBuffer will be freed, but without updating...
OpenSSL 3.0.0 < 3.0.10 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.0.10. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.10 advisory. - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functio...
PT-2023-25479 · Jerryscriptproject · Jerryscript
Name of the Vulnerable Software and Affected Versions: JerryscriptProject jerryscript version 3.0.0 Description: An issue in JerryscriptProject jerryscript allows an attacker to obtain sensitive information via a crafted script to the arrays. Recommendations: For version 3.0.0, consider restricti...
CVE-2023-36201
An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...
PT-2023-8924 · Sanitize +2 · Sanitize +2
Name of the Vulnerable Software and Affected Versions: Sanitize versions 3.0.0 through 6.0.2 Description: The issue is related to the Sanitize HTML and CSS sanitizer, which can be exploited by an attacker using carefully crafted input to sneak arbitrary HTML and CSS through the sanitizer. This...
CVE-2020-21252
Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter...
GHSA-5WFC-HJRC-GQ87 hjson stack exhaustion vulnerability
An issue was discovered hjson through 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted objects that deeply nested structures...
CVE-2023-34620
An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
hjson-java 缓冲区错误漏洞
hjson-java is Hjson open source a json, java conversion library . A security vulnerability exists in hjson-java 3.0.0 and earlier versions, which stems from a vulnerability that allows an attacker to cause a denial of service through the use of objects with circular dependencies...
CVE-2023-34620
An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2015-10118
A vulnerability classified as problematic was found in cchetanonline WP-CopyProtect up to 3.0.0. This vulnerability affects the function CopyProtectoptionspage of the file wp-copyprotect.php. The manipulation of the argument CopyProtectnrctext leads to cross site scripting. The attack can be...
Cross site scripting
A vulnerability classified as problematic was found in cchetanonline WP-CopyProtect up to 3.0.0. This vulnerability affects the function CopyProtectoptionspage of the file wp-copyprotect.php. The manipulation of the argument CopyProtectnrctext leads to cross site scripting. The attack can be...
Avo 输入验证错误漏洞
Avo is an open source ruby on rails admin panel creation framework from Avo Open Source. An input validation error vulnerability exists in Avo version 2.33.2, version 3.0.0.pre12. The vulnerability stems from a user storing input and updating a record class using a polymorphic field type that doe...
Avo 跨站脚本漏洞
Avo is an open source ruby on rails admin panel creation framework from Avo Open Source. A cross-site scripting vulnerability exists in Avo version 2.33.2, 3.0.0.pre12, which stems from the vulnerability of certain avo fields to XSS attacks when rendering html-based content...
ABB ASPECT 安全漏洞
ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. A security vulnerability exists in several ABB products that stems from allowing privilege escalation. Affected products and versions: ABB ASPECT-Enterprise versions 3.0.0 through 3.07.01; NEXUS Series ...
Xibo 安全漏洞
Xibo is an open source content management system from Xibo Digital Signage. A security vulnerability exists in Xibo versions prior to 3.0.0 through 3.3.5, which originates from a stack trace being printed when called with missing or invalid parameters, which can be exploited by an attacker to vie...
CVE-2023-20883
In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, there is potential for a denial-of-service DoS attack if Spring MVC is used together with a reverse proxy cache...
CVE-2023-23300
The Toybox.Cryptography.Cipher.initialize API method in CIQ API version 3.0.0 through 4.1.7 does not validate its parameters, which can result in buffer overflows when copying data. A malicious application could call the API method with specially crafted parameters and hijack the execution of the...