PT-2024-1323

Name of the Vulnerable Software and Affected Versions Spring Framework versions 6.0.15 and 6.1.2 Description The issue is related to an uncontrolled resource consumption vulnerability in the Spring Framework, which can be exploited by sending specially crafted HTTP requests, potentially leading t...

libavc:mvc_dec_fuzzer: Heap-buffer-overflow in ih264d_get_bits_h264

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=6600447909494784 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: mvcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux...

org.noear:cron4j-solon-plugin (1.0.5.2), org.noear:dubbo-solon-plugin (1.0.5.2) +31 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.5.2)

org.noear:solon MAVEN version 1.0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:cron4j-solon-plugin 1.0.5.2 - org.noear:dubbo-solon-plugin 1.0.5.2 - org.noear:mqtt-solon-plugin 1.0.5.2 -...

org.noear:beetlsql-solon-plugin (1.0.36), org.noear:cron4j-solon-plugin (1.0.36) +43 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.36)

org.noear:solon MAVEN version 1.0.36 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:beetlsql-solon-plugin 1.0.36 - org.noear:cron4j-solon-plugin 1.0.36 - org.noear:dubbo-solon-plugin 1.0.36 -...

org.noear:beetlsql-solon-plugin (1.0.26), org.noear:cron4j-solon-plugin (1.0.26) +44 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.26)

org.noear:solon MAVEN version 1.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:beetlsql-solon-plugin 1.0.26 - org.noear:cron4j-solon-plugin 1.0.26 - org.noear:dubbo-solon-plugin 1.0.26 -...

org.noear:cron4j-solon-plugin (1.0.4.2), org.noear:solon-api (1.0.4.2) +28 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.4.2)

org.noear:solon MAVEN version 1.0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:cron4j-solon-plugin 1.0.4.2 - org.noear:solon-api 1.0.4.2 - org.noear:solon-mvc 1.0.4.2 - org.noear:solon-mvc-beetl...

org.noear:solon-api (1.0.3.44), org.noear:solon-mvc (1.0.3.44) +24 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.3.44)

org.noear:solon MAVEN version 1.0.3.44 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon-api 1.0.3.44 - org.noear:solon-mvc 1.0.3.44 - org.noear:solon.boot.jdkhttp 1.0.3.44 - org.noear:solon.boot.jet...

org.noear:cron4j-solon-plugin (1.0.12), org.noear:dubbo-solon-plugin (1.0.12) +41 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.12)

org.noear:solon MAVEN version 1.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:cron4j-solon-plugin 1.0.12 - org.noear:dubbo-solon-plugin 1.0.12 - org.noear:mqtt-solon-plugin 1.0.12 -...

org.noear:solon-api (1.0.3.38), org.noear:solon-mvc (1.0.3.38) +22 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.3.38)

org.noear:solon MAVEN version 1.0.3.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon-api 1.0.3.38 - org.noear:solon-mvc 1.0.3.38 - org.noear:solon.boot.jetty 1.0.3.38 - org.noear:solon.boot.jlhtt...

org.noear:solon-api (1.0.3.36), org.noear:solon-mvc (1.0.3.36) +22 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.3.36)

org.noear:solon MAVEN version 1.0.3.36 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon-api 1.0.3.36 - org.noear:solon-mvc 1.0.3.36 - org.noear:solon.boot.jetty 1.0.3.36 - org.noear:solon.boot.jlhtt...

org.noear:solon-api (1.0.3.31), org.noear:solon-mvc (1.0.3.31) +38 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.3.31)

org.noear:solon MAVEN version 1.0.3.31 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon-api 1.0.3.31 - org.noear:solon-mvc 1.0.3.31 - org.noear:solon.boot.jetty 1.0.3.31 - org.noear:solon.boot.jlhtt...

org.noear:solon-api (1.0.3.28), org.noear:solon-mvc (1.0.3.28) +18 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.3.28)

org.noear:solon MAVEN version 1.0.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon-api 1.0.3.28 - org.noear:solon-mvc 1.0.3.28 - org.noear:solon.boot.jetty 1.0.3.28 - org.noear:solon.boot.jlhtt...

org.noear:solon-api (1.0.3.33), org.noear:solon-mvc (1.0.3.33) +20 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.3.33)

org.noear:solon MAVEN version 1.0.3.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon-api 1.0.3.33 - org.noear:solon-mvc 1.0.3.33 - org.noear:solon.boot.jetty 1.0.3.33 - org.noear:solon.boot.jlhtt...

org.noear:solon-api (1.0.3.30), org.noear:solon-mvc (1.0.3.30) +19 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.3.30)

org.noear:solon MAVEN version 1.0.3.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon-api 1.0.3.30 - org.noear:solon-mvc 1.0.3.30 - org.noear:solon.boot.jetty 1.0.3.30 - org.noear:solon.boot.jlhtt...

org.noear:solon-api (1.0.3.26), org.noear:solon-mvc (1.0.3.26) +18 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.3.26)

org.noear:solon MAVEN version 1.0.3.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon-api 1.0.3.26 - org.noear:solon-mvc 1.0.3.26 - org.noear:solon.boot.jetty 1.0.3.26 - org.noear:solon.boot.jlhtt...

org.noear:cron4j-solon-plugin (1.0.14), org.noear:dubbo-solon-plugin (1.0.14) +41 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.14)

org.noear:solon MAVEN version 1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:cron4j-solon-plugin 1.0.14 - org.noear:dubbo-solon-plugin 1.0.14 - org.noear:mybatis-solon-plugin 1.0.14 -...

org.noear:cron4j-solon-plugin (1.0.4.4), org.noear:dubbo-solon-plugin (1.0.4.4) +31 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.4.4)

org.noear:solon MAVEN version 1.0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:cron4j-solon-plugin 1.0.4.4 - org.noear:dubbo-solon-plugin 1.0.4.4 - org.noear:mqtt-solon-plugin 1.0.4.4 -...

org.noear:cron4j-solon-plugin (1.0.19), org.noear:dubbo-solon-plugin (1.0.19) +43 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.19)

org.noear:solon MAVEN version 1.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:cron4j-solon-plugin 1.0.19 - org.noear:dubbo-solon-plugin 1.0.19 - org.noear:feign-solon-plugin 1.0.19 -...

org.noear:cron4j-solon-plugin (1.0.5.10), org.noear:dubbo-solon-plugin (1.0.5.10) +32 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.5.10)

org.noear:solon MAVEN version 1.0.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:cron4j-solon-plugin 1.0.5.10 - org.noear:dubbo-solon-plugin 1.0.5.10 - org.noear:mqtt-solon-plugin 1.0.5.10 -...

org.noear:cron4j-solon-plugin (1.0.5.8), org.noear:dubbo-solon-plugin (1.0.5.8) +34 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.5.8)

org.noear:solon MAVEN version 1.0.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:cron4j-solon-plugin 1.0.5.8 - org.noear:dubbo-solon-plugin 1.0.5.8 - org.noear:mqtt-solon-plugin 1.0.5.8 -...