CVE-2020-24020

Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code...

CVE-2020-24020

Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code...

CVE-2020-24020

CVE-2020-24020 describes a Buffer Overflow in FFmpeg 4.2.3, triggered in dnn_execute_layer_pad (libavfilter/dnn/dnn_backend_native_layer_pad.c) due to a memcpy call without length checks. This could allow a remote attacker to execute arbitrary code. The description across multiple trusted sources...

All Vulnerabilities for tracker.awr.im Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| tracker.awr.im ---|--- Open Bug Bounty...

PT-2021-14080 · Growi · Growi

Name of the Vulnerable Software and Affected Versions: GROWI versions prior to 4.2.3 Description: A cross-site scripting issue allows remote attackers to inject an arbitrary script via unspecified vectors. Recommendations: For versions prior to 4.2.3, update to version 4.2.3 or later to resolve t...

PowerDNS Authoritative Server Information Disclosure Vulnerability (2020-05)

PowerDNS Authoritative Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2020-15715 · Free · Freebox Server

Name of the Vulnerable Software and Affected Versions: Freebox Server versions prior to 4.2.3 Description: A CSRF issue exists in the UPnP MediaServer implementation. Recommendations: For versions prior to 4.2.3, update to version 4.2.3 or later to resolve the issue...

FFmpeg Resource Management Error Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A resource management error vulnerability exists in FFmpeg version 4.2.3. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked...

FFmpeg <= 4.2.3 Buffer Overflow Vulnerability

FFmpeg is prone to a buffer overflow vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

WordPress Simple File List plugin <= 4.2.2 - Unauthenticated Arbitrary File Upload vulnerability leading to Remote Code Execution (RCE)

Unauthenticated Arbitrary File Upload vulnerability leading to Remote Code Execution RCE discovered by h00die and coiffeur in WordPress Simple File List plugin versions = 4.2.2. Solution Update the WordPress Simple File List plugin to the latest available version at least 4.2.3...

CVE-2019-19984

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed users with editpost capabilities to manage plugin settings and email campaigns...

CVE-2019-19981

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for CSRF to be exploited on all plugin settings...

CVE-2019-19985

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure...

Unspecified Vulnerability in WordPress Email Subscribers & Newsletters

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Email Subscribers & Newsletters is an email subscription and newsletter plugin used in it. A security vulnerability exists in Email...

VulnCheck KEV: CVE-2019-19985

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure...

GHSA-2P82-V77V-MPPR Airbrake keys not being filtered

The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklistkeys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 also, 4.2.2 and earlier are unaffected...

Apache Karaf Arbitrary File Overwrite Vulnerability

Apache Karaf is the United States Apache Apache Foundation for the deployment of applications and components of a lightweight OSGi Java Dynamic Modular System container. An arbitrary file overwrite vulnerability exists in Apache Karaf versions prior to 4.2.3, which can be exploited by a remote...

vBulletin 4.2.3 vBSecurity 2.2.2 Pro Open Redirection

Exploit Title : vBulletin 4.2.3 vBSecurity v2.2.2 Pro Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 01/03/2019 Vendor Homepage : vbulletin.com dragonbyte-tech.com Software Information Link : dragonbyte-tech.com/store/vbsecurity.123/ Software...

Cybozu Garoon 3.5.0 - 4.6.2 Notification List SQLi Vulnerability

Cybozu Garoon is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon";...

Plone allows remote attackers to read hidden folder contents

ftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden folder contents via unspecified vectors...