CVE-2020-36129

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...

CVE-2020-36129

CVE-2020-36129 affects AOM/libaom v2.0.1 with a stack buffer overflow in src/aom_image.c. CVSSv3.1 base 8.8 (network, high impact). Connected sources confirm patched updates across multiple distributions: openSUSE/SUSE advisories (openSUSE-SU-2021:1624-1; openSUSE update notes) and GLSA/Mageia ad...

CVE-2020-36129: Out-of-bounds Write

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...

CVE-2020-36129

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...

CVE-2020-36129

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...

CVE-2021-43690

YurunProxy v0.01 is affected by a Cross Site Scripting (XSS) vulnerability in src/Client.php. The root cause is the exit function terminating the script and printing a message that contains data read from a socket (socket_read). This can lead to reflected or stored XSS depending on how the messag...

CVE-2021-43690

YurunProxy v0.01 is affected by a Cross Site Scripting XSS vulnerability in src/Client.php. The exit function will terminate the script and print a message which have values from the socketread...

PT-2021-23915

Name of the Vulnerable Software and Affected Versions: YurunProxy version 0.01 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the src/Client.php file. The exit function will terminate the script and print a message that includes values from the socket read. This...

CVE-2021-43690: Improper Neutralization of Input During Web Page Generation

YurunProxy v0.01 is affected by a Cross Site Scripting XSS vulnerability in src/Client.php. The exit function will terminate the script and print a message which have values from the socketread...

Path traversal

tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/loadfont.php. The variable src is coming from $SERVER"argv" then there is a path manipulation vulnerability...

PT-2021-23916

Name of the Vulnerable Software and Affected Versions: tripexpress version 1.1 Description: The issue concerns a path manipulation vulnerability in the file system/helpers/dompdf/load font.php. The src variable, which comes from $ SERVER"argv", is involved in this vulnerability. Recommendations:...

Design/Logic Flaw

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

CVE-2021-23433

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

CVE-2021-23433: Improperly Controlled Modification of Object Prototype Attributes

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c

A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system availability...

RHEL 8 : libsolv (RHSA-2021:4060)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4060 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv:...

PT-2021-10640

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is a buffer overflow vulnerability in the function src parser trans stage 1 2 3 trgil gilcc before commit 803969389ca9c06237075a7f8eeb1a19e6651759. This allows attackers to cause...

CVE-2021-31380

A configuration weakness in the JBoss Application Server AppSvr component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to disclose sensitive information in the HTTP response which allows the attacker to obtain sensitive...

CVE-2021-31380

A configuration weakness in the JBoss Application Server AppSvr component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to disclose sensitive information in the HTTP response which allows the attacker to obtain sensitive...

CVE-2021-31352

An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers, which could allow a remote attacker to obtain sensitive information. A remote attacker with read and write access to network data could exploit thi...