768 matches found
CVE-2023-48307
The CVE-2023-48307 entry describes a Server-Side Request Forgery (SSRF) flaw in the Nextcloud Mail app. Affected are Nextcloud Mail versions starting from 1.13.0 up to, but not including, 2.2.8 and up to, but not including, 3.3.0. An attacker can abuse an unprotected endpoint in the Mail app to p...
Free5gc allows a local attacker to cause a denial of service via the free5gc-compose component
An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component...
Apache Hadoop allows local user to gain root privileges
Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges. If the YARN cluster is accepting work from remote authenticated users, this MAY permit remote users to gain root privileges. Hadoop 3.3.0 updated the "...
CVE-2023-47025
An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component...
PT-2023-30293 · Free5Gc · Free5Gc
Name of the Vulnerable Software and Affected Versions: Free5gc version 3.3.0 Description: The issue allows a local attacker to cause a denial of service via the free5gc-compose component. Recommendations: For Free5gc version 3.3.0, at the moment, there is no information about a newer version that...
CVE-2023-47025
An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component...
CVE-2023-47347
Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...
Buffer overflow
Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...
PT-2023-30423 · Free5Gc · Free5Gc
Name of the Vulnerable Software and Affected Versions: free5gc version 3.3.0 Description: The issue allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes. This can be achieved by exploiting a Buffer Overflow vulnerability...
CVE-2023-47347
CVE-2023-47347 affects free5gc version 3.3.0. The root cause is a Buffer Overflow in PFCP message handling, allowing an attacker to cause a denial of service when the PFCP Sequence Number is crafted to overflow bytes. The PT-2023-30423 entry confirms the impact as DoS via crafted PFCP messages an...
PT-2023-30422 · Free5Gc +2 · Free5Gc +2
Name of the Vulnerable Software and Affected Versions: free5gc version 3.3.0 UPF version 1.2.0 SMF version 1.2.0 Description: The issue allows attackers to cause a denial of service via crafted PFCP messages. This is a Buffer Overflow vulnerability. Recommendations: For free5gc version 3.3.0,...
free5GC Security Vulnerabilities
free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. free5GC suffers from a security vulnerability that stems from the presence of a buffer overflow vulnerability. An attacker could exploit this vulnerability to cause a denial of service DOS via a...
CVE-2023-5904
Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-5900
Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
Cross site scripting
Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
PKP Web Application Library Cross-Site Scripting Vulnerability
The PKP Web Application Library is a library shared by PKP's Open Journal System OJS, Open Conference System OCS, Open Monograph Press OMP, Open Preprint System OPS, and Open Harvester System OHS. A cross-site scripting vulnerability exists in versions prior to PKP Web Application Library 3.3.0-1...
PKP Web Application Library Cross-Site Request Forgery Vulnerability
The PKP Web Application Library is a library shared by PKP's Open Journal System OJS, Open Conference System OCS, Open Monograph Press OMP, Open Preprint System OPS, and Open Harvester System OHS. A cross-site request forgery vulnerability exists in versions prior to PKP Web Application Library...
CVE-2023-5898
Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...