567 matches found
so-we-must-think.space Open Redirect vulnerability OBB-3805292
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Memory Leak
libxml2.so is vulnerable to Memory Leak. The vulnerability is due to use-after-free in the xmlUnlinkNode function in tree.c. An attacker could submit a crafted XML document, which would result in Denial of Service...
so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion
Description The plugin does not validate user input before using it to generate paths passed to include function/s, allowing users with the administrator role to perform LFI attacks in the context of Multisite WordPress sites. 1. Create a multi-site wordpress setup, i.e. using docker-containers,...
Denial Of Service (DoS)
libde265.so is vulnerable to Denial of Service DoS. The vulnerability is due to the slicesegmentheader function in the slice.cc component. An attacker is able to cause a DoS condition by crafting a specially crafted file and tricking the system into processing it. This could disrupt service on th...
CVE-2023-47511
CVE-2023-47511 affects the WordPress plugin SO WP Pinyin Slugs, vulnerable to an authenticated Stored XSS in versions <= 2.3.0. The issue requires admin-level privileges (admin+) and, per Patchstack, was fixed in version 2.3.1. Public sources (NVD and patch info) describe the CVSS vector as in...
Out-of-bounds Write
libexiv2.so is vulnerable to Out-of-bounds Write. The vulnerability exists because of an integer overflow in the brotliUncompress function within bmffimage.cpp. This flaw enables an attacker to manipulate and potentially read, write, delete, or modify image metadata such as Exif, IPTC, XMP, and I...
FreeBSD : OpenSSL -- potential loss of confidentiality (4a4712ae-7299-11ee-85eb-84a93843eb75)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4a4712ae-7299-11ee-85eb-84a93843eb75 advisory. - SO-AND-SO reports: Moderate severity: A bug has been identified in the processing of key and...
Out-of-bounds Read
ibX11.so is vulnerable to Out-of-bounds Read. The vulnerability is due to function XkbReadKeySyms allocating insufficient memory for the keysym buffer also failure to handle errors returned by XkbReadBufferCopyKeySyms. This can leads to potential buffer overflow and out-of-bounds memory access...
MAL-2023-8350 Malicious code in so-loader-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404b6971c77426e284e330430c8b8f418e3a0622bc881dbc1dae7b32264ee032 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in so-loader-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404b6971c77426e284e330430c8b8f418e3a0622bc881dbc1dae7b32264ee032 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Buffer Overflow
libkrb5.so is vulnerable to Buffer Overflows. A buffer overflow in the RPC library can be exploited by remote attackers to cause a denial of service or an arbitrary code execution. This vulnerability is only exploitable on systems whose unistd.h header file which does not define the FDSETSIZE mac...
Denial Of Service (DoS)
libhdf5.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack-based buffer overflow in H5Eint.c, which allows an attacker to cause an application crash by providing a maliciously crafted input...
Buffer Overflow
libhdf5.so is vulnerable to Buffer Overflow. There is no explicit check in H5Oattrdecode to verifying that the multiplication operation didn't exceed the addressable range. The fixed code can check for overflow by dividing attr-shared-datasize by dtsize and comparing the result to dssize...
Denial Of Service (DoS)
libexiv2.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the PngImage::printStructure function at pngimage.cpp due to a buffer overflow which allows an attacker to cause an application crash...
Use After Free
libz3.so is vulnerable to Use After Free. The vulnerability exists in the pddsimplifier.cpp when the solver attempts to simplify the constraints, which causes unexpected memory access, leading to segmentation faults or arbitrary code execution...
Double Free
libkrb5.so is vulnerable to Double Free. The vulnerability exists due to a failure in authorization data handling in the dotgsreq.c, which allows an attacker to cause the Key Distribution Center KDC to free the same pointer twice when incorrect data is copied from one ticket to another...
Integer Overflow
libImlib2.so is vulnerable to Integer Overflow. The vulnerability exists due to invalid memory allocations which allows an attacker to cause an overflow and out-of-bound reads...
Denial Of Service (DoS)
libbind9.so is vulnerable to Denial Of Service DoS. The vulnerability exists when debug logging is turned on, due to assertion errors in renderecs which allows an attacker to cause an application crash...
Hardcoded credentials
An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...
CVE-2023-22957
An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...