PT-2021-10858 · Phplist · Phplist

Name of the Vulnerable Software and Affected Versions: phplist version 3.5.3 Description: A stored cross site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Send test field under the Start or continue campaign module...

CVE-2020-23208: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Send test" field under the "Start or continue campaign" module...

PT-2021-28281

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 16 crash type. The crash state includes functions such as sampled data finish, sampled data continue...

PT-2021-28059

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to ...

PT-2021-28027

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which is a type of memory corruption bug. This occurs when a program attempts to access memory that ha...

PT-2021-5708

Name of the Vulnerable Software and Affected Versions Ghostscript GhostPDL versions 9.50 through 9.53.3 Description The issue is related to a use-after-free in the sampled data sample function, which can be called from sampled data continue and interp. This can potentially allow an attacker to...

PT-2021-28278

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash state includes functions such as ldl he p, ldn he p, and flatview write continue...

qemu:qemu-fuzz-i386-target-generic-fuzz-e1000e: Memcpy-param-overlap in flatview_write_continue

Detailed Report: https://oss-fuzz.com/testcase?key=5646951483441152 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-e1000e Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7f1348400000,0x7f1348400f05 and...

PT-2020-22106

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A heap-buffer-overflow READ 2 crash has been reported. The crash state includes functions such as lduw he p, ldn he p, and flatview write continue...

PT-2020-22015

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves functions such as gs scan token, tokenexec continue, and...

PT-2020-6463

Name of the Vulnerable Software and Affected Versions QEMU version 5.0.0 Description The issue is related to a heap-based buffer overflow in the flatview read continue function in exec.c due to improper handling of a write operation in the SDHC BLKSIZE case by hw/sd/sdhci.c. This can potentially...

June 16, 2020—KB4567512 (OS Builds 18362.904 and 18363.904)

None None...

undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header

A flaw was discovered in Undertow where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service...

UBUNTU-CVE-2020-10705

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service...

CVE-2020-10705

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service...

CVE-2020-10705

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service...

CVE-2020-10705

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service...

undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header

A flaw was discovered in Undertow where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service...

CVE-2020-10705: Allocation of Resources Without Limits or Throttling

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service...

PT-2020-12289

Name of the Vulnerable Software and Affected Versions Undertow versions prior to 2.1.1.Final Description A flaw was discovered where certain requests to the "Expect: 100-continue" header may cause an out of memory error, potentially leading to a denial of service. Recommendations For versions pri...