4668 matches found
CVE-2023-23615: Improper Access Control
Discourse is an open source discussion platform. The embeddable comments can be exploited to create new topics as any user but without any clear title or content. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. As a workaround, disable embeddable comments ...
Mitigation of M-05: Issue not mitigated
Lines of code Vulnerability details The sponsor disputes the issue, but never follows up after judge's comments, so the same issue remains in the new code. --- The text was updated successfully, but these errors were encountered: All reactions...
Mitigation of M-06: Issue not mitigated
Lines of code Vulnerability details The sponsor disputes the issue, but never follows up after judge's comments, so the same issue remains in the new code. --- The text was updated successfully, but these errors were encountered: All reactions...
libXpm ParseComment Function DoS
The vulnerability of the ParseComment function in the library for working with X Pixmap XPM files, libXpm, is related to an infinite loop during the processing of unclosed comments. Exploiting this vulnerability could allow a malicious actor to cause service failures through a specially created X...
libXpm security update
3.5.12-9 - Fix CVE-2022-46285: infinite loop on unclosed comments 2161800 - Fix CVE-2022-44617: runaway loop with width of 0 2161808 - Fix CVE-2022-4883: compression depends on /usr/local/bin:/usr/bin 2160238...
libXpm: Infinite loop on unclosed comments
A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library...
libXpm: Infinite loop on unclosed comments
A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library...
libXpm: Infinite loop on unclosed comments
A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library...
libXpm: Infinite loop on unclosed comments
A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library...
libXpm: Infinite loop on unclosed comments
A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library...
libXpm security update
An update is available for libXpm. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org X11 libXpm runtime library. Security Fixes: libXpm: compression commands...
Memory corruption
When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory use after free...
PT-2023-12220 · Openeuler · Byacc
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue occurs when processing files and comments, where malloc stores the data of the current line. However, when processing comments, malloc...
Heateor Social Comments < 1.6.2 - Contributor+ Stored XSS
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
WordPress Heateor Social Comments Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
Software Heateor Social Comments Type Plugin Vulnerable versions = 1.6.1 Fixed in 1.6.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23977 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2e8e8868e318 Credits Rafshanzani...
SQL Injection
Overview activerecord is a library for databases on Rails. Affected versions of this package are vulnerable to SQL Injection due to improper sanitization of comments passed via annotate, optimzerhints methods, or via the QueryLogs interface, which adds annotations automatically. Exploiting this...
GSD-2023-1001310 media: dvbdev: fix build warning due to comments
media: dvbdev: fix build warning due to comments This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...
WordPress MainWP Comments Extension Plugin <= 4.0.6 is vulnerable to Arbitrary Content Deletion
Software MainWP Comments Extension Type Plugin Vulnerable versions = 4.0.6 Fixed in 4.0.7 OWASP Top 10 A5: Broken Access Control Classification Arbitrary Content Deletion CVE CVE-2023-23663 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID f2e868b8fd5d Credits Dave Jong...
libXpm -- Issues handling XPM files
The X.Org project reports: CVE-2022-46285: Infinite loop on unclosed comments When reading XPM images from a file with libXpm 3.5.14 or older, if a comment in the file is not closed i.e. a C-style comment starts with "/" and is missing the closing "/", the ParseComment function will loop forever...
CVE-2022-4295
The Show All Comments WordPress plugin before 7.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privilege users such as admin...