PT-2023-20685 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2024.1 Description: An issue was discovered in the Open Design Alliance Drawings SDK where a crafted DWG file can force the SDK to reuse an object that has been freed. This can be leveraged ...

CVE-2023-26495

Open Design Alliance Drawings SDK (before 2024.1) is affected by a use-after-free vulnerability in DWG parsing. A crafted DWG file can trigger use-after-free, enabling an attacker to execute arbitrary code in the context of the current process, potentially in conjunction with other vulnerabilitie...

Design/Logic Flaw

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njslvlhshfind at src/njslvlhsh.c...

Design/Logic Flaw

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsdumpisrecursive at src/njsvmcode.c...

Design/Logic Flaw

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njsfunctionframe at src/njsfunction.h...

Design/Logic Flaw

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process...

Design/Logic Flaw

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions...

Design/Logic Flaw

SageMath FlintQS 1.0 relies on pathnames under TMPDIR typically world-writable, which for example allows a local user to overwrite files with the privileges of a different user who is running FlintQS...

Design/Logic Flaw

Insecure Storage of Sensitive Information vulnerability in ABB My Control System on-premise allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System...

Design/Logic Flaw

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

Design/Logic Flaw

HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate substantially more memory than requir...

CVE-2023-24374

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Photon WP Material Design Icons for Page Builders plugin = 1.4.2 versions...

CVE-2023-24374

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Photon WP Material Design Icons for Page Builders plugin = 1.4.2 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Photon WP Material Design Icons for Page Builders plugin = 1.4.2 versions...

CVE-2023-24374 WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Photon WP Material Design Icons for Page Builders plugin = 1.4.2 versions...

CVE-2023-24374 WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Photon WP Material Design Icons for Page Builders plugin = 1.4.2 versions...

CVE-2023-24374

Photon WP Material Design Icons for Page Builders plugin (versions

PT-2023-19536 · WordPress · Photon Wp Material Design Icons For Page Builders

Name of the Vulnerable Software and Affected Versions: Photon WP Material Design Icons for Page Builders plugin versions 1.4.2 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or those with higher...

WordPress Plugin Material Design Icons for Page Builders 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

Design/Logic Flaw

An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A search timeout could be triggered if a specific HTML payload was used in the issue description...