PT-2024-19999

Name of the Vulnerable Software and Affected Versions Pimcore's Admin Classic Bundle versions prior to 1.2.3 Description The password reset functionality in Pimcore's Admin Classic Bundle sends an email to the user requesting a password change with a URL containing a unique token, valid for 24...

DoS (Denial of Service) ch.qos.logback:logback-classic Dependency in Confluence Data Center and Server

This High severity ch.qos.logback:logback-classic Dependency vulnerability was introduced in versions 6.0.1 of Confluence Data Center and Server. This ch.qos.logback:logback-classic Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:...

DoS (Denial of Service) ch.qos.logback:logback-classic Dependency in Confluence Data Center and Server

This High severity ch.qos.logback:logback-classic Dependency vulnerability was introduced in versions 6.0.1 of Confluence Data Center and Server. This ch.qos.logback:logback-classic Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:...

The vulnerability of the RSLinx Classic communication server arises from the improper assignment of permissions to critical resources, allowing attackers to execute arbitrary code.

The vulnerability of the RSLinx Classic communication server is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a hacker to execute arbitrary code...

CVE-2023-52174

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

CVE-2023-52174

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

CVE-2023-52174

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

Design/Logic Flaw

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

Design/Logic Flaw

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

CVE-2023-52174

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...

CVE-2023-52173

XnView Classic on Windows is affected by a Write Access Violation in xnview.exe+0x3ADBD0 affecting versions prior to 2.51.3. The vulnerability is due to a fault in handling memory access, with potential impact on confidentiality, integrity, and availability as reflected in reported CVSS metrics (...

XnView Classic Security Vulnerability

XnView Classic is a suite of image viewing software. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in XnView Classic prior to version 2.51.3, which originates from a write access conflict in xnview.exe+0x3125D6...

CVE-2023-52174

CVE-2023-52174 affects XnView Classic on Windows, where versions prior to 2.51.3 suffer a Write Access Violation at xnview.exe+0x3125D6 . The vulnerability is documented with a high-impact CVSS of 9.8 (Network, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Concrete details across connected sources confir...

XnView Classic Security Vulnerability

XnView Classic is a suite of image viewing software. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in XnView Classic prior to version 2.51.3, which originates from a write access conflict in xnview.exe+0x3ADBD0...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

CVE-2023-52173

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...

classic-rally-timing.fr Improper Access Control vulnerability OBB-3824382

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...