370.dk Cross Site Scripting vulnerability OBB-3503924

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

370.dk Cross Site Scripting vulnerability OBB-3401823

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE SLES12 Security Update : xterm (SUSE-SU-2022:3952-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3952-1 advisory. - CVE-2022-24130: Fixed buffer overflow in setsixel when Sixel support is enabled. bsc1195387 Tenable has extracted the preceding descriptio...

HPESBNW04371 rev.2 - Aruba Access Points, Multiple Vulnerabilities

Potential Security Impact: Local: Cross-Site Scripting XSS; Remote: Arbitrary Code Execution, Cross-Site Scripting XSS, Denial of Service DoS, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 100 Series Access Points - See Details section for affected versions...

Jenkins Lucene-Search Plugin 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site scripting...

GSD-2022-1004054 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by...

GSD-2022-1003874 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 b...

GSD-2022-1003549 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 b...

GSD-2022-1003300 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by...

GSD-2022-1003000 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by...

Huawei EulerOS: Security Advisory for xterm (EulerOS-SA-2022-1593)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0051 Updated xterm packages fix security vulnerability

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text. CVE-2022-24130...

xterm through Patch 370 when Sixel support is enabled allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.

...

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

Buffer overflow

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

CVE-2022-24130

The CVE-2022-24130 issue affects xterm with Sixel support enabled, where a crafted text input can trigger a buffer overflow in graphics_sixel.c:set_sixel. The vulnerability is active in xterm builds up to patches around 370, and multiple downstream advisories (e.g., CBL-Mariner stating affected v...

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

PT-2022-6590 · Xterm +4 · Xterm +4

Name of the Vulnerable Software and Affected Versions: xterm versions through Patch 370 Description: The issue is related to a buffer overflow in the set sixel function within the graphics sixel.c component of the xterm terminal emulator. This occurs when Sixel support is enabled and an attacker...