CVE-2023-46345: NULL Pointer Dereference

Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c...

CVE-2023-46345

Catdoc v0.95 is affected by a NULL pointer dereference in the xls2csv component (src/xlsparse.c). The issue can impact availability (per CVSS: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) but does not affect confidentiality or integrity per the same entry. There is no publicly documented fix or patched v...

CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

CVE-2023-46009

CVE-2023-46009 affects gifsicle, where the vulnerability is a floating point exception in the resize_stream path (src/xform.c) of gifsicle-1.94. Multiple connected sources (Mageia openSUSE openSUSE-SU-2024:0146-1, Fedora advisories, and openVAS/Nessus plugins) confirm the issue and the update to ...

CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

CVE-2023-46009: Incorrect Comparison

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

CVE-2023-42298: Integer Overflow or Wraparound

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the QDecCoordOnUnitSphere function of file src/bifs/unquantize.c...

CVE-2023-42298

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the QDecCoordOnUnitSphere function of file src/bifs/unquantize.c...

PT-2023-6217

Name of the Vulnerable Software and Affected Versions GPAC versions 2.2.1 and earlier Description The issue is related to an integer overflow in the Q DecCoordOnUnitSphere function, located in the src/bifs/unquantize.c file of the GPAC multimedia platform. This can be exploited by a local attacke...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller-fips, grpcurl, bom, slsa-verifier, kubernetes-ingress-defaultbackend, pulumi, spark-operator, newrelic-infrastructure-agent, prometheus-postgres-exporter, secrets-store-csi-driver-provider-gcp, prometheus-elasticsearch-exporter-fips,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kaf, certificate-transparency, spark-operator, kubeflow, kubevela, slsa-verifier, pulumi-language-java, pulumi-language-dotnet, scorecard, conftest, hey, nats, k3d, kubescape, kpt, gobuster, nodetaint, mc, secrets-store-csi-driver, src, grype, flux-source-controller,...

PT-2023-7588 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version US AC10V4.0si V16.03.10.13 cn Description: The issue is related to a stack overflow in the sub 47D878 function when handling the src parameter, potentially allowing a remote attacker to execute arbitrary code or cause a...

Malicious code in component---src-pages-corporate-delegate-packages-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94743768fa45d297822cb222b29ce23ca1ef1e8fbbc617de5e13df7b8fc60700 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in component---src-pages-corporate-delegate-packages-js

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2023-5268

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/makehtmltaglistaction.php. The manipulation of the argument mktime leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2023-5266

A vulnerability, which was classified as critical, was found in DedeBIZ 6.2. This affects an unknown part of the file /src/admin/tagsmain.php. The manipulation of the argument ids leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

CVE-2023-5266

CVE-2023-5266 describes a critical SQL injection in DedeBIZ 6.2, affecting an unknown part of the file /src/admin/tags_main.php. The vulnerability arises from manipulation of the ids argument, enabling remote exploitation. Multiple sources confirm the issue and note that the exploit has been publ...

CVE-2023-5257 WhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversal

A vulnerability was found in WhiteHSBG JNDIExploit 1.4 on Windows. It has been rated as problematic. Affected by this issue is the function handleFileRequest of the file src/main/java/com/feihong/ldap/HTTPServer.java. The manipulation leads to path traversal. The exploit has been disclosed to the...

CVE-2023-5266: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in DedeBIZ 6.2. This affects an unknown part of the file /src/admin/tagsmain.php. The manipulation of the argument ids leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...