CVE-2024-45234

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a signedAttrs encoded in non-canonical form. This bypasses Fort's BER decoder, reaching a point in the code that panics...

CVE-2024-45235

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field. Fort references this pointer without sanitizi...

CVE-2024-45239

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a null eContent field. Fort dereferences the pointer without sanitizing it first. Because Fort is an RPKI Relying Party, ...

CVE-2024-45235

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field. Fort references this pointer without sanitizi...

CVE-2024-45239

Summary of CVE-2024-45239 (Fort Validator): Fort before 1.6.3 is vulnerable when parsing certain RPKI repository data. A malicious RPKI repository descending from a trusted Trust Anchor can serve an ROA or a Manifest containing a null eContent field, which Fort dereferences without sanitizing, ca...

CVE-2024-45235

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field. Fort references this pointer without sanitizi...

CVE-2024-45239

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a null eContent field. Fort dereferences the pointer without sanitizing it first. Because Fort is an RPKI Relying Party, ...

DEBIAN-CVE-2023-52910

In the Linux kernel, the following vulnerability has been resolved: iommu/iova: Fix alloc iova overflows issue In allocandinsertiovarange, there is an issue that retrypfn overflows. The value of iovad-anchor.pfnhi is 0UL, then when iovad-cachednode is iovad-anchor, curriova-pfnhi + 1 will overflo...

UBUNTU-CVE-2023-52910

In the Linux kernel, the following vulnerability has been resolved: iommu/iova: Fix alloc iova overflows issue In allocandinsertiovarange, there is an issue that retrypfn overflows. The value of iovad-anchor.pfnhi is 0UL, then when iovad-cachednode is iovad-anchor, curriova-pfnhi + 1 will overflo...

Malicious code in sap-anchor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 03412160219bd651a9db70d48651f41e2e0af75a37170e0d71b22f70cb8b885e The OpenSSF Package Analysis project identified 'sap-anchor' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in Solոet.Anchor.SourсeGenerator (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Sоlnet.Anchor.Toоl (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4669 Malicious code in Sоlnet.Anchor.Toоl (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-37732

Cross Site Scripting vulnerability in Anchor CMS v.0.12.7 allows a remote attacker to execute arbitrary code via a crafted .pdf file...

Anchor Cross-Site Scripting Vulnerability

Anchor is an open source lightweight blogging system. A cross-site scripting vulnerability exists in Anchor version v.0.12.7, which originates from a vulnerability that could allow a remote attacker to execute arbitrary code via a crafted .pdf file...

CVE-2024-37732

Cross Site Scripting vulnerability in Anchor CMS v.0.12.7 allows a remote attacker to execute arbitrary code via a crafted .pdf file...

CVE-2024-37732

CVE-2024-37732 affects Anchor CMS v0.12.7. The vulnerability is described as a Cross-Site Scripting issue that allows a remote attacker to execute arbitrary code via a crafted .pdf file. All provided sources (NVD, Red Hat, OSV, CVE list, CNNVD, etc.) consistently cite the same description, confir...

CVE-2024-37732

Cross Site Scripting vulnerability in Anchor CMS v.0.12.7 allows a remote attacker to execute arbitrary code via a crafted .pdf file...

CVE-2024-37732

Cross Site Scripting vulnerability in Anchor CMS v.0.12.7 allows a remote attacker to execute arbitrary code via a crafted .pdf file...

PT-2024-27725 · Unknown · Anchor Cms

Name of the Vulnerable Software and Affected Versions: Anchor CMS version 0.12.7 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted .pdf file. Recommendations: For Anchor CMS version 0.12.7, update to a version that fixes this issue, as usin...