8688 matches found
UBUNTU-CVE-2021-34193
Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs...
CVE-2021-34193
Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs...
OpenSC 缓冲区错误漏洞
OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC smart card middleware prior to version 0.23, which originates from a stack overflow that can be caused by a crafted APDU response...
CVE-2021-34193
Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs...
CVE-2021-34193
CVE-2021-34193 describes a stack overflow in the OpenSC smart card middleware (before 0.23) triggered by crafted APDU responses. Affected product: OpenSC smart card middleware (OpenSC). Impact per NVD: high, with availability impact and no confidentiality/integrity impact. Several connected advis...
CVE-2023-4439
A vulnerability was found in SourceCodester Card Holder Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Minus Value Handler. The manipulation leads to improper validation of specified quantity in input. The attack may be...
CVE-2023-4439
A vulnerability was found in SourceCodester Card Holder Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Minus Value Handler. The manipulation leads to improper validation of specified quantity in input. The attack may be...
Input validation
A vulnerability was found in SourceCodester Card Holder Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Minus Value Handler. The manipulation leads to improper validation of specified quantity in input. The attack may be...
CVE-2023-4439 SourceCodester Card Holder Management System Minus Value unknown vulnerability
A vulnerability was found in SourceCodester Card Holder Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Minus Value Handler. The manipulation leads to improper validation of specified quantity in input. The attack may be...
CVE-2023-4439
CVE-2023-4439 affects SourceCodester Card Holder Management System 1.0, specifically the Minus Value Handler. The issue is improper validation of a quantity input, allowing a remote attack. Documents consistently describe the vulnerability as involving unknown functionality in the Minus Value Han...
PT-2023-29224 · Sourcecodester · Sourcecodester Card Holder Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Card Holder Management System version 1.0 Description: A vulnerability was found in the SourceCodester Card Holder Management System, affecting some unknown functionality of the component Minus Value Handler. The manipulation...
Card Holder Management System 安全漏洞
Card Holder Management System is a cardholder management system from the individual developer Arvin Arandilla. A security vulnerability exists in Card Holder Management System version 1.0, which stems from the component Minus Value Handler that can lead to improper input validation...
Recapping the top stories from Black Hat and DEF CON
Welcome to this weeks edition of the Threat Source newsletter. I had a significant amount of FOMO last week seeing everyone out in Vegas. I was happy to not get conference crud sickness, but it seems like I missed a great time otherwise. But, as anyone who works with me could guess, I was followi...
The vulnerability of the Smart Card Resource Management Server, a server for managing smart card resources on the Windows operating system, allows a perpetrator to disclose protected information.
The vulnerability of the Smart Card Resource Management Server, a server for managing smart card resources on the Windows operating system, is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose the protected information...
Fedora 38 : opensc (2023-29530cc60b)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-29530cc60b advisory. Fix buffer overrun vulnerability 2211088, fixes CVE-2023-2977 Tenable has extracted the preceding description block directly from the Fedora securit...
Fedora 37 : opensc (2023-2afb831742)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-2afb831742 advisory. Fix buffer overrun vulnerability 2211088, fixes CVE-2023-2977 Tenable has extracted the preceding description block directly from the Fedora securit...
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux Kernel suffers from a memory misreference vulnerability that originates from a confusion in the instruction responsible for freeing memory in the vmxnet3_rq_alloc_rx_buf, a component of the VMware vmxnet3 Ethernet network card driver. An attacker can exploit this vulnerability to cause a system crash and kernel information disclosure.
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Ongoing Xurum Attacks on E-commerce Sites Exploiting Critical Magento 2 Vulnerability
E-commerce sites using Adobe's Magento 2 software are the target of an ongoing campaign that has been active since at least January 2023. The attacks, dubbed Xurum by Akamai, leverage a now-patched critical security flaw CVE-2022-24086, CVSS score: 9.8 in Adobe Commerce and Magento Open Source...
card-logo.com Cross Site Scripting vulnerability OBB-3575852
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...