ALPINE-CVE-2023-38403

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...

DEBIAN-CVE-2023-38403

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...

AZL-27672 CVE-2023-38403 affecting package iperf3 for versions less than 3.14-1

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...

iDisplay PlatPlay DS 跨站脚本漏洞

iDisplay PlatPlay DS is a multimedia solution from iDisplay. A cross-site scripting vulnerability exists in iDisplay PlatPlay DS versions prior to 3.14 that stems from susceptibility to stored cross-site scripting attacks...

PT-2023-24207

Name of the Vulnerable Software and Affected Versions iDisplay PlatPlay DS versions prior to 3.14 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2023-3693 · Iperf3 +9 · Iperf3 +9

Name of the Vulnerable Software and Affected Versions: iperf3 versions prior to 3.14 Description: The issue is related to an integer overflow when handling field lengths, which can be exploited by a remote attacker to cause a denial of service. This can lead to heap corruption via a crafted lengt...

PT-2023-22513 · Imgproxy · Imgproxy

Name of the Vulnerable Software and Affected Versions: imgproxy versions 3.14.0 and earlier imgproxy prior to version 3.15.0 Description: The issue is related to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter. This allows for potential exploitation...

imgproxy 跨站脚本漏洞

imgproxy is imgproxy individual developer's fast and secure standalone server for tweaking and converting remote mirrors. A cross-site scripting vulnerability exists in imgproxy versions prior to 3.14.0, which stems from the presence of reflected cross-site scripting XSS...

SUSE CVE-2014-2739

The cmareqhandler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to resolve an RDMA over Converged Ethernet aka RoCE address that is properly resolved within a different module, which allows remote attackers to cause a denial of service incorrect...

PT-2023-33299 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.14 through 5.10.158 Description: The issue is related to a possible use-after-free in the memcg write event control function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2023-33403 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.269 Description: The issue concerns a possible use-after-free in the memcg write event control function. This problem was introduced in version v3.14 and is fixed in Linux Kernel version v4.19.269...

PT-2022-35541 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.14 through 5.10.149 Description: The issue is related to the detachment of devices when removing the host in the drm/mipi-dsi component. The actual impact and attack plausibility have not yet been proven...

PT-2022-33767 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.14 through v5.15.62 Description: The issue is related to error handling in the adminq component. It was introduced in version v3.14 and fixed in version v5.15.63. The actual impact and attack plausibility have not yet...

PT-2022-33390 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.14 through v5.19.3 Description: The issue is related to error handling in the adminq component. It was introduced in version v3.14 and fixed in version v5.19.4. The actual impact and attack plausibility have not yet...

Barco Control Room Cross-Site Scripting Vulnerability (CNVD-2022-61400)

Barco Control Room is a visualization and collaboration solution from Barco Belgium. Used to build control rooms, the Barco Control Room Management Suite web application version 3.14 previously contained a cross-site scripting vulnerability that could be exploited by attackers to execute JavaScri...

Barco Control Room Cross-Site Scripting Vulnerability

Barco Control Room is a visualization and collaboration solution from Barco Belgium. Used to build control rooms, a cross-site scripting vulnerability exists in the Barco Control Room Management Suite web application prior to version 3.14. The vulnerability stems from the URL parameter of the...

Barco Control Room Cross-Site Scripting Vulnerability (CNVD-2022-61398)

Barco Control Room is a visualization and collaboration solution from Barco Belgium. Used to build control rooms, a cross-site scripting vulnerability exists in Barco Control Room prior to version 3.14. The vulnerability stems from the osusername parameter of the /checklogin.jsp endpoint not bein...

CVE-2022-26973

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the license file name, the returned error message exposes internal directory path details...

CVE-2022-26976

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization in the upload mechanism is leads to reflected XSS...

CVE-2022-26977

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization of the upload mechanism is leads to stored XSS...