CVE-2024-40743

The stripImages and stripIframes methods didn't properly process inputs, leading to XSS vectors...

CVE-2024-40743

The Joomla! content management system is vulnerable to Cross-Site Scripting (XSS) due to improper input processing in the stripImages and stripIframes methods within the Outputfilter component. This vulnerability affects Joomla! 3.x versions prior to 3.10.17 , 4.x versions prior to 4.4.7 , and 5....

PT-2024-29022 · Joomla +2 · Joomla! +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises from the stripImages and stripIframes methods not properly processing inputs, which leads to XSS vectors. There is no information...

Node.js Permission Model Data Compromise

The vulnerability of the Permission Model component in the Node.js software platform is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

ROS-20240611-13

Vulnerability in clone/clonefrom components of Python library for interacting with git repositories GitPython is associated with errors in input processing. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code by injecting a specially crafted URL int...

Zoom Workplace Buffer Overflow Vulnerability

Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. Zoom Workplace suffers from a buffer overflow vulnerability that stems from...

ROS-20240521-10

A vulnerability in the JSSE component of the Oracle Java SE software platform and Oracle GraalVM virtual machine. Enterprise Edition is related to the lack of message integrity checking. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information or...

ROS-20240521-11

A vulnerability in the JSSE component of the Oracle Java SE software platform and Oracle GraalVM virtual machine. Enterprise Edition is related to the lack of message integrity checking. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information or...

ROS-20240521-09

A vulnerability in the JSSE component of the Oracle Java SE software platform and Oracle GraalVM virtual machine. Enterprise Edition is related to the lack of message integrity checking. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information or...

WinRAR ANSI Escape Sequence Handler DoS

The vulnerability of the ANSI Escape Sequence Handler component in the WinRAR file archiver is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to remotely cause service failures or replace the display on the screen...

Oracle VM VirtualBox Code Execution

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PAN-OS DoS

The vulnerability of the PAN-OS operating system is related to errors in syntax validation during input processing. Exploiting this vulnerability allows a malicious actor to trigger a service failure using specially created Windows New Technology LAN Manager NTLM packets from Windows servers...

Range header analysis DoS

The vulnerability of the Range header analysis component in the module interface between web servers and web applications in Rack relates to the processing of input data, which can take an unexpected amount of time. Exploiting this vulnerability may allow a malicious actor to cause service failur...

virtuoso-opensource DoS

The vulnerability of the boxcollen function in the virtuoso-opensource web application development platform is related to insufficient processing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures after executing the SELECT operator...

ROS-20240403-12

A vulnerability in the Range header analysis component of the modular interface between web servers and the Rack web applications is related to the creation of input data that could cause the analysis of the Content-Disposition header in Rack to take an unexpected amount of time...

FreeBSD OpenBSD NFS Code Execution

The vulnerability of the NFS network file system server implementation for FreeBSD and OpenBSD is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.4, which stems from processing malicious input that could lead to code execution...

CVE-2024-23346 pymatgen arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

Pymatgen Python Materials Genomics is an open-source Python library for materials analysis. A critical security vulnerability exists in the JonesFaithfulTransformation.fromtransformationstr method within the pymatgen library prior to version 2024.2.20. This method insecurely utilizes eval for...

Zoom Video Conferencing Privilege Escalation

The vulnerability of Zoom video conferencing software is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Microsoft Outlook Code Execution

The vulnerability of the Microsoft Outlook email client is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by having the user open a specially crafted URL address remotely...