17574 matches found
libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
A flaw was found in the libsoup library. Decoding specially crafted UTF-8 input data with the soupheaderparseparamliststrict function can cause a heap-based buffer overflow, potentially resulting in code execution and denial of service to applications linked to the library...
libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
A flaw was found in the libsoup library. Decoding specially crafted UTF-8 input data with the soupheaderparseparamliststrict function can cause a heap-based buffer overflow, potentially resulting in code execution and denial of service to applications linked to the library...
WordPress StageShow plugin <= 9.8.6 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin StageShow versions = 9.8.6...
CVE-2024-57438
Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves higher level roles...
libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
A flaw was found in the libsoup library. Decoding specially crafted UTF-8 input data with the soupheaderparseparamliststrict function can cause a heap-based buffer overflow, potentially resulting in code execution and denial of service to applications linked to the library...
drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
...
CVE-2024-57439
An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service DoS by duplicating the login name of the account...
RuoYi 安全漏洞
RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v4.8.0, which stems from a problem with the reset password screen that allows an attacker with administrator privileges to cause a denial of service by copying the login name...
CVE-2025-23054
creationtimestamp| type| source ---|---|--- 2025-01-28 17:18:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113907118805634233 2025-01-28 18:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgt2rxgvag2i 2025-01-28 19:09:39+00:00| seen|...
CVE-2024-0140
creationtimestamp| type| source ---|---|--- 2025-01-28 03:24:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113903840773074829 2025-01-28 04:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrlsqwomv2w 2025-01-28 06:15:13+00:00| seen|...
SUSE CVE-2024-43445
A vulnerability exists in OTRS and OTRS Community Edition that fail to set the HTTP response header X-Content-Type-Options to nosniff. An attacker could exploit this vulnerability by uploading or inserting content that would be treated as a different MIME type than intended. This issue affects:...
SUSE CVE-2025-24389
Certain errors of the upstream libraries will insert sensitive information in the OTRS or OTRS Community Edition log mechanism and mails send to the system administrator. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS...
January 28, 2025-KB5050593 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2
None None...
January 28, 2025-KB5050577 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2
None None...
UBUNTU-CVE-2025-24814
Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that 1 use the "FileSystemConfigSetService" component the default in "standalone" or "user-managed" mode, and 2 are running without authentication and authorization are vulnerable to a sort...
PT-2025-2648 · Otrs · Otrs
Name of the Vulnerable Software and Affected Versions: OTRS versions 6.0.x through 8.0.x OTRS versions 2023.x through 2024.x Description: An improper privilege management issue in the OTRS Generic Interface module allows users with read-only permissions to change the ticket status. This issue may...
WordPress plugin WP Customer Area 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-24698
Cross-Site Request Forgery CSRF vulnerability in G5Theme Essential Real Estate allows Cross Site Request Forgery. This issue affects Essential Real Estate: from n/a through 5.1.8...
WordPress ExactMetrics plugin <= 8.1.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin ExactMetrics versions = 8.1.0...