13097 matches found
PT-2023-35749 · Simdutf · Simdutf
Name of the Vulnerable Software and Affected Versions: simdutf affected versions not specified Description: The issue is related to a heap buffer overflow error. It occurs in the simdutf::haswell::convert masked utf8 to utf16 function, specifically in the simdutf::haswell::implementation::convert...
CVE-2023-1579
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...
ASB-A-268377609
Bulletin has no description...
PUB-A-250649259
Bulletin has no description...
ASB-A-267957662
Bulletin has no description...
ASB-A-267959364
Bulletin has no description...
ASB-A-268412170
Bulletin has no description...
ASB-A-259984559
Bulletin has no description...
ASB-A-261858325
In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-267959361
Bulletin has no description...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Python Charmers Future (CVE-2022-40899)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Python Charmers Future caused by improper input validation. CVE-2022-40899. Python Charmers Future is included as part of our service runtime images. Please read the details for...
GHSA-GVG8-R8W2-9GFJ phpMyFAQ vulnerable to improper input validation
Improper Neutralization of Input During Web Page Generation in phpMyFAQ...
HashiCorp Vault's PKI mount vulnerable to denial of service
HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault...
Magento Open Source allows XML Injection
Adobe Commerce versions 2.4.4-p2 and earlier and 2.4.5-p1 and earlier are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of thi...
WC Fields Factory < 4.1.7 - ShopManager+ SQLi
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin PoC...
CVE-2023-28883
In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint...
CVE-2023-25670 TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...
SUSE-SU-2023:1570-1 Security update for libgit2
This update for libgit2 fixes the following issues: - CVE-2023-22742: Fixed SSH keys verification failure bsc1207364...
GHSA-FRJG-G767-7363 code-server vulnerable to Missing Origin Validation in WebSockets
Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability can allow an adversary in specific scenarios to access data from and connect to the code-server instance...
