GHSA-WQ3V-3GRQ-6F86 Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7...

CVE-2021-0177

CVE-2021-0177 describes an input validation/consistency issue in Intel® PROSet/Wireless Wi‑Fi and Killer™ Wi‑Fi software for Windows 10/11 that could allow an unauthenticated adjacent user to cause a denial of service. Connected sources provide concrete details: affected products include Intel® P...

CVE-2022-21996

Win32k Elevation of Privilege Vulnerability...

Buffer Overflow

librecad is vulnerable to buffer overflow. CDataMoji of the jwwlib component allows an attacker to achieve Remote Code Execution using a crafted JWW document...

Prototype Pollution

object-path-set is vulnerable to prototype pollution. An attacker can inject properties into existing construct prototypes via the isValidKey function of index.js and modify attributes such as proto, constructor, and prototype...

DSA-5068-1 chromium - security update

Bulletin has no description...

Denial Of Service (DoS)

...

ASB-A-204905325

Bulletin has no description...

ASB-A-195750667

Bulletin has no description...

ASB-A-195751080

Bulletin has no description...

ASB-A-195750718

Bulletin has no description...

ASB-A-195751178

Bulletin has no description...

ASB-A-202025316

Bulletin has no description...

DSA-5065-1 ipython - security update

Bulletin has no description...

DSA-5064-1 python-nbxmpp - security update

Bulletin has no description...

GHSA-VCWC-6MR9-8M7C Cross-site Scripting in phpmyadmin

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection...

GHSA-544X-2JX9-4PFG Path traversal in Apache Karaf

Apache Karaf obr: commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr: commands are not very used and the entry is set by user. This has been fixed in revision:...

WordPress Construction Lite theme <= 1.2.5 - Authenticated Arbitrary Plugin Activation/Deactivation vulnerability

Authenticated Arbitrary Plugin Activation/Deactivation vulnerability discovered by Ex.Mi Patchstack in WordPress Construction Lite theme versions = 1.2.5. Solution Deactivate and delete. The vendor ignores the vulnerability reports, avoids any conversation...

CVE-2021-46519

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsarraylength at src/mjsarray.c...

Infinite Loop in Apache Xerces Java

There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present withi...