19363 matches found
CVE-2024-51657: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Woopy Plugins SmartLink Dynamic URLs smartlink-dinamic-urls allows Stored XSS.This issue affects SmartLink Dynamic URLs: from n/a through = 1.1.0...
Eclipse Mosquitto Buffer Overflow Info Disclosure
The vulnerability of the Eclipse Mosquitto messaging broker is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...
WordPress Dynamic URL SEO plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Dynamic URL SEO versions = 1.0...
WordPress Dynamic URL SEO Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Dynamic URL SEO Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52470 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f710c58fedfc Credits Mika Required privilege...
Veritas NetBackup security vulnerabilities
Veritas Technologies Veritas NetBackup is a powerful enterprise-class data backup management software from Veritas Technologies, USA. A security vulnerability exists in Veritas NetBackup versions prior to 10.5 that stems from the fact that if a user executes specific commands or is forced to...
Adobe Illustrator Buffer Overflow Code Execution
The vulnerability of Adobe Illustrator’s graphic editor is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
ODXSW_DLL.dll Privilege Escalation
The vulnerability of the ODXSWDLL.dll library, which is used in AutoCAD software for simulation, design, and drafting, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
CVE-2024-11237
A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3vT TTV6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack-based buffer overflow. The attack may be...
Clementine security vulnerabilities
Clementine is a multi-platform music player from the Clementine open source. A security vulnerability exists in Clementine v1.3.1, which originated from a vulnerability that allows local attackers to execute arbitrary code via a crafted DLL file...
PDF viewing and editing programs Code Execution
The vulnerability of PDF viewing and editing programs like Acrobat Reader is related to the improper use of dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Adobe Illustrator Buffer Overflow RCE
The vulnerability of Adobe Illustrator’s graphic editor arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created file...
AutoCAD DLL Code Execution
The vulnerability of the CC5Dll.dll and ASMBASE228A.dll libraries, which are used in AutoCAD software for simulation, design, and drafting, stems from a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or...
Important: Red Hat Security Advisory: openexr security update
An update for openexr is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Important: openexr security update
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...
PT-2024-11915 · Undefined · Undefined
CVE-2024-50986 CVE-20224-50986 DLL Hijacking Exploit for Clementine Description: An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. Version Affected: Clementi... https://t.co/QByf3fJ8GI...
ROS-20241112-05
A vulnerability in the XkbSetCompatMap function of the X Window System X.Org Server implementation is related to a buffer overflow in dynamic memory. buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker to escalate privileges...
PT-2024-34485 · Unknown · Clementine
Name of the Vulnerable Software and Affected Versions: Clementine version 1.3.1 Description: The issue allows a local attacker to execute arbitrary code via a crafted DLL file. This can be exploited by a local attacker. Recommendations: For Clementine version 1.3.1, consider restricting access to...
CVE-2024-36507
A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering...
Moderate: Red Hat Security Advisory: python3.9 security update
An update for python3.9 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
kernel: drm/amdgpu: change vm->task_info handling
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm-taskinfo handling This patch changes the handling and lifecycle of vm-taskinfo object. The major changes are: - vm-taskinfo is a dynamically allocated ptr now, and its uasge is reference counted. - introduci...