CVE-2022-26943

The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the pool renders the authentication challenge vulnerable to two attacks. First, due to the limited...

PT-2023-12895 · Motorola · Motorola Mtm5000

Name of the Vulnerable Software and Affected Versions: Motorola MTM5000 series firmwares affected versions not specified Description: The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG that relies on a tick count register as its sole entropy source. This...

mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc

MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...

Integer Overflow to Buffer Overflow

Overview Affected versions of this package are vulnerable to Integer Overflow to Buffer Overflow vi DFAContentModel::countLeafNodes and DFAContentModel::buildDFA. An attacker can cause out-of-bound access by sending a specially crafted HTTP request. Remediation Upgrade xerces-c to version 3.2.4 o...

CVE-2023-44996

Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...

CVE-2023-44996

Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...

CVE-2023-44996 WordPress Post View Count Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...

CVE-2023-44996

CVE-2023-44996 affects the WordPress plugin Post View Count (wp-simple-post-view) &lt;= 1.8.2. Described as a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered by an unauthenticated attacker, potentially allowing abuse of authenticated user actions. Public sources agree on CSR...

WordPress Plugin Post View Count Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...

PT-2023-29339 · WordPress · Naresh Parmar Post View Count

Name of the Vulnerable Software and Affected Versions: Naresh Parmar Post View Count plugin versions 1.8.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

CVE-2023-44996: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Naresh Parmar Post View Count plugin = 1.8.2 versions...

CLSA-2023-1696877581 binutils: Fix of 9 CVEs

CVE-2017-16831: Fix excessive memory allocation attempts and possible integer overflows when attempting to read a COFF binary with a corrupt symbol count - CVE-2020-19726: Fix parsing a corrupt PE format file - CVE-2021-45078: Fix out-of-bounds write in stabxcoffbuiltintype - CVE-2021-46174: Fix...

DEBIAN-CVE-2023-39193

A flaw was found in the Netfilter subsystem in the Linux kernel. The sctpmtcheck did not validate the flagcount field. This flaw allows a local privileged CAPNETADMIN attacker to trigger an out-of-bounds read, leading to a crash or information disclosure...

AZL-31270 CVE-2023-39193 affecting package kernel for versions less than 5.15.135.1-2

A flaw was found in the Netfilter subsystem in the Linux kernel. The sctpmtcheck did not validate the flagcount field. This flaw allows a local privileged CAPNETADMIN attacker to trigger an out-of-bounds read, leading to a crash or information disclosure...

Linux kernel buffer error vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unverified flagcount field. An attacker could exploit this vulnerability to cause a system crash or...

The vulnerability of the tif_processing_dng_channel_count function in the ImageGear image processing library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tifprocessingdngchannelcount function in the ImageGear image processing library relates to the issue of data being written outside of the buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2023-9474 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the HID intel-ish-hid ipc component in the Linux kernel. It involves the handling of the ACPI GPE bit, which is used for wake-up capabilities on EHL Elkhart Lak...

WordPress Post View Count Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Post View Count Type Plugin Vulnerable versions = 2.0 Fixed in 2.0.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44996 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 9ca3df3cf077 Credits Rio Darmawan Required...

DEBIAN-CVE-2023-43655

Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has registerargcargv enabled in php.ini. Versions 2.6.4, 2.2.22 an...