3353 matches found
CVE-2023-21704
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability...
CVE-2023-21690
Microsoft Protected Extensible Authentication Protocol PEAP Remote Code Execution Vulnerability...
CVE-2023-21688
NT OS Kernel Elevation of Privilege Vulnerability...
CVE-2023-21691
Microsoft Protected Extensible Authentication Protocol PEAP Information Disclosure Vulnerability...
CVE-2023-25564 GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings. The variable outlen was not initialized and could cause writing a zero to an arbitrary place in memory if...
GHSA-8H3G-HCWP-6HXQ semver-tags is vulnerable to Command Injection via the getGitTagsRemote function
All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization...
GHSA-2275-RPF5-XV8H is-http2 vulnerable to Improper Input Validation
All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other checks, and sandboxes being employed to the isH2 function...
CVE-2022-47768
Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal...
USN-5833-1 python-future vulnerability
Sebastian Chnelik discovered that python-future incorrectly handled certain HTTP header field. An attacker could possibly use this issue to cause a denial of service...
CVE-2023-23950
User’s supplied input usually a CRLF sequence can be used to split a returning response into two responses...
Mozilla: libusrsctp library out of date
The Mozilla Foundation Security Advisory describes this flaw as: An out of date library libusrsctp contained vulnerabilities that could potentially be exploited...
DEBIAN-CVE-2022-48281
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...
The vulnerability of the Libxml2 library lies in the improper limitation on XML references to external objects, which allows attackers to access confidential data.
The vulnerability of the Libxml2 library is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...
LiftKit database library SQL注入漏洞
LiftKit database library is LiftKit open source a LiftKit database repository . LiftKit database library version 2.13.2 before the SQL injection vulnerability , the vulnerability stems from the file src/Query/Query.php function processOrderBy security issues , resulting in SQL injection...
CVE-2015-10039
A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functionality in the library src/Complex.Domino.Lib/Lib/EntityFactory.cs. The manipulation leads to sql injection. Upgrading to version 0.1.5524.38553 is able to address this issue. Th...
CVE-2023-21784
3D Builder Remote Code Execution Vulnerability...
CVE-2023-21787
3D Builder Remote Code Execution Vulnerability...
CVE-2023-21793
3D Builder Remote Code Execution Vulnerability...