63 matches found
CVE-2023-6749
Unchecked length coming from user input in settings shell...
CVE-2023-6749 Unchecked user input length in the Zephyr Settings Shell
Unchecked length coming from user input in settings shell...
CVE-2023-6749
CVE-2023-6749 affects Zephyr RTOS, specifically the libzephyr.so component and its Settings Shell handling of SETTINGS_VALUE_STRING values. The root cause is unchecked length from user input, which can lead to a buffer overflow and possible Denial of Service as described in Veracode’s entry. The ...
CVE-2023-6749 Unchecked user input length in the Zephyr Settings Shell
Unchecked length coming from user input in settings shell...
Debian: Security Advisory (DLA-317-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35
CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...
CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35
CVE-2015-6749 affecting package vorbis-tools for versions less than 1.4.0-35. A patched version of the package is available...
Nextcloud: OAuth2 "authorization_code" is valid indefinetly
A security advisory reported that the OAuth2 endpoint was not following best practices, as the authorization code was generated without a timeout, allowing an attacker with access to obtain and redeem the code in the future...
CVE-2022-31690
Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client via the browser to the Authorization Server which...
CVE-2020-26877
ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect...
CVE-2020-26877
ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect...
Authorization
ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect...
CVE-2020-26877
CVE-2020-26877 affects ApiFest OAuth 2.0 Server 0.3.1 and is caused by not validating the redirect_uri per RFC 6749, enabling an open redirect where an attacker-controlled redirect_uri can receive an authorization code. This is described as an open redirector vulnerability and is related to CVE-2...
SUSE: Security Advisory (SUSE-SU-2015:1765-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-6749
This CVE entry is rejected/not used; the candidate has been withdrawn by its CNA.
Foxit Studio Photo < 3.6.6.909 Multiple Vulnerabilities
According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid133853; scriptversion"1.2";...
Foxit Software Foxit Studio Photo <= 3.6.6.779 Multiple Vulnerabilities
Foxit Studio Photo is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2019-6749
Foxit Studio Photo is affected by an EZIX file parsing vulnerability that enables remote code execution. The flaw (CVE-2019-6749) arises from improper validation of user-supplied data in EZIX file handling, causing a write past the end of an allocated structure. Impact: attackers can execute code...