h-cons.ru Cross Site Scripting vulnerability OBB-3841196

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

January 23, 2024—KB5034204 (OS Builds 22621.3085 and 22631.3085) Preview

None None...

The vulnerability of the derivate_spatial_luma_vector_prediction function in the h.265 Libde265 implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the derivatespatiallumavectorprediction function in the h.265 Libde265 codec implementation is related to the possibility of writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, a...

h-a-d.hr Improper Access Control vulnerability OBB-3833333

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] [DLA 3699-1] libde265 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3699-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 30, 2023 https://wiki.debian.org/LTS -...

GHSA-37VQ-HR2F-G7H7

creationtimestamp| type| source ---|---|--- 2023-12-22 09:51:44+00:00| seen| https://t.me/ctinow/158282...

Siemens Industrial Products Uncontrolled Resource Consumption (CVE-2019-11478)

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. A remote attacker could cause a denial of service condition by sending specially crafted TCP Selective Acknowledgment SACK sequences to affected products. This plugin only works with Tenable.ot...

Siemens Industrial Products Uncontrolled Resource Consumption (CVE-2019-11479)

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. An attacker with network access to affected products could cause a denial of service condition because of a vulnerability in the TCP retransmission queue implementation kernel when handling TCP...

h-s-s.de Improper Access Control vulnerability OBB-3819110

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

claus-h-m.de Improper Access Control vulnerability OBB-3818176

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

libavc:svc_dec_fuzzer: Crash in ih264d_filter_boundary_left_nonmbaff

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4827771779809280 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzermsanlibavc Platform Id: linux...

CVE-2023-40476

A stack-based buffer overflow was found in the GStreamer Plugins Bad when handling malformed files with H.265 video streams. This issue requires user interaction with the library and may allow a malicious user to cause an integer overflow before allocating the buffer, triggering a crash or code...

libavc:svc_dec_fuzzer: Heap-buffer-overflow in ih264d_format_convert

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=6176978839142400 Project: libavc Fuzzing Engine: afl Fuzz Target: svcdecfuzzer Job Type: aflasanlibavc Platform Id: linux Crash Type:...

PT-2023-8234

Name of the Vulnerable Software and Affected Versions QTS versions prior to 5.0.1.2514 build 20230906 QTS versions prior to 5.1.2.2533 build 20230926 QuTS hero h versions prior to h5.0.1.2515 build 20230907 QuTS hero h versions prior to h5.1.2.2534 build 20230927 Description A buffer copy without...

The vulnerability of the H2 database management system’s web interface allows attackers to escalate their privileges.

The vulnerability of the H2.svz database management system’s web interface relates to the unencrypted storage of confidential information. Exploiting this vulnerability can allow attackers to enhance their privileges...

h-abogados.com Improper Access Control vulnerability OBB-3800843

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Debian: Security Advisory (DLA-3676-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3676-1] libde265 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3676-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky November 30, 2023 https://wiki.debian.org/LTS -...

libavc:svc_dec_fuzzer: Crash in ih264d_fill_bs1_16x16mb_pslice

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4760994878193664 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzermsanlibavc Platform Id: linux...

libavc:svc_dec_fuzzer: Heap-buffer-overflow in ih264d_format_convert

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4668804936105984 Project: libavc Fuzzing Engine: honggfuzz Fuzz Target: svcdecfuzzer Job Type: honggfuzzasanlibavc Platform Id: linux...