13097 matches found
PUB-A-303107435
Bulletin has no description...
ASB-A-295908146
Bulletin has no description...
ASB-A-309367791
Bulletin has no description...
ASB-A-294872878
Bulletin has no description...
ASB-A-303101067
Bulletin has no description...
ASB-A-303101624
Bulletin has no description...
ASB-A-311290653
Bulletin has no description...
CVE-2023-23634
SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint...
CVE-2023-50836
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ibericode HTML Forms allows Stored XSS.This issue affects HTML Forms: from n/a through 1.3.28...
OSV-2023-1365 Heap-use-after-free in xmlStaticCopyNode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65363 Crash type: Heap-use-after-free READ 8 Crash state: xmlStaticCopyNode xmlDocCopyNode xmlParseReference...
DSA-5589-1 nodejs - security update
Bulletin has no description...
MAL-2023-8765 Malicious code in multicolored (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 89f0e1660e4708cd5f0568f9c85ea2f35f883c21cb0f6a7d37e4d9d25a1dc8c8 The OpenSSF Package Analysis project identified 'multicolored' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...
CVE-2023-48653
Concrete CMS before 8.5.14 and 9 before 9.2.3 allows Cross Site Request Forgery CSRF via ccm/calendar/dialogs/event/delete/submit. An attacker can force an admin to delete events on the site because the event ID is numeric and sequential...
unsafe-libyaml unaligned write of u64 on 32-bit and 16-bit platforms
Affected versions allocate memory using the alignment of usize and write data to it of type u64, without using core::ptr::writeunaligned. In platforms with sub-64bit alignment for usize including wasm32 and x86 these writes are insufficiently aligned some of the time. If using an ordinary optimiz...
SUSE-SU-2023:4938-1 Security update for wireshark
This update for wireshark fixes the following issues: Update to 3.6.19: - CVE-2023-6175: NetScreen file parser crash bsc1217272...
BELL-CVE-2023-6918
Bulletin has no description...
Business Logic Errors
microweber is vulnerable to Business Logic Errors. The vulnerability exists due to a lack of coupon code validation. which allows attackers to change coupon codes and lower prices...
MGASA-2023-0346 Updated gimp packages fix security vulnerabilities
GIMP has been updated to version 2.10.36 to fix several security issues. CVE-2023-44441: GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44442: GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44443: GIMP P...
Buffer Overflow
chromium:sid is vulnerable to buffer overflow. The vulnerability due to to access a memory location after the memory has been freed or deallocated. It allow a remote attacker to potentially exploit heap corruption via a crafted HTML page...