CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability...

CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability...

CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability...

CVE-2023-36872 VP9 Video Extensions Information Disclosure Vulnerability

...

CVE-2023-36872 VP9 Video Extensions Information Disclosure Vulnerability

...

CVE-2023-36872

CVE-2023-36872 refers to an information-disclosure flaw in the Microsoft Windows VP9 Video Extensions library. Public sources in the connected set describe the vulnerability as allowing an attacker to read small portions of heap memory when a user opens a specially crafted file, requiring user in...

VP9 Video Extensions Information Disclosure Vulnerability

...

CVE-2023-36872: Improper Input Validation

VP9 Video Extensions Information Disclosure Vulnerability...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer Tools. A malicious person with access to the development environment can exploit the vulnerabilities to exploit attacks that could lead to the following categories of damage: Bypassing security measure. Remote code execution User rights...

PT-2023-3519 · Unknown · Vp9 Video Extensions

Name of the Vulnerable Software and Affected Versions: VP9 Video Extensions affected versions not specified Description: The issue is related to insufficient protection of internal data in the VP9 Video Extensions package. Exploitation of this issue may allow an attacker to gain unauthorized acce...

Microsoft Media-Wiki Extensions security vulnerabilities

Microsoft Media-Wiki Extensions is an extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft Media-Wiki Extensions. An attacker could exploit the vulnerability to remotely execute code...

New Mozilla Feature Blocks Risky Add-Ons on Specific Websites to Safeguard User Security

Mozilla has announced that some add-ons may be blocked from running on certain sites as part of a new feature called Quarantined Domains. "We have introduced a new back-end feature to only allow some extensions monitored by Mozilla to run on specific websites for various reasons, including securi...

golang: net/http, net/textproto: denial of service from excessive memory allocation

A flaw was found in Golang Go, where it is vulnerable to a denial of service caused by memory exhaustion in the common function in HTTP and MIME header parsing. By sending a specially crafted request, a remote attacker can cause a denial of service...

CODESYS SP Realtime NT DoS

The vulnerability of the extensions for the development environment CODESYS SP Realtime NT, CODESYS Runtime Toolkit, and CODESYS PLCWinNT is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

GHSA-M9P2-J4HG-G373 Apache Cassandra: Privilege escalation when enabling FQL/Audit logs

Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1. WORKAROUND The vulnerability requires nodetool/JMX access to be...

Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled

...

PT-2023-4178 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.170 Description: The issue is related to an inappropriate implementation in the Extensions component of Google Chrome, which could allow an attacker to inject scripts or HTML into a privileged page v...

org.keycloak:keycloak-dependencies-server-all (1.9.0.cr1), org.keycloak:keycloak-dependencies-server-min (1.9.0.cr1) +2 more potentially affected by CVE-2023-2422 via org.keycloak:keycloak-services (1.9.0.cr1)

org.keycloak:keycloak-services MAVEN version 1.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.cr1 -...

org.keycloak:keycloak-authz-policy-drools (2.0.0.cr1), org.keycloak:keycloak-dependencies-server-all (2.0.0.cr1) +3 more potentially affected by CVE-2023-2422 via org.keycloak:keycloak-services (2.0.0.cr1)

org.keycloak:keycloak-services MAVEN version 2.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.0.0.cr1 -...

org.keycloak:keycloak-authz-policy-drools (2.1.0.cr1), org.keycloak:keycloak-dependencies-server-all (2.1.0.cr1) +3 more potentially affected by CVE-2023-2422 via org.keycloak:keycloak-services (2.1.0.cr1)

org.keycloak:keycloak-services MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.1.0.cr1 -...