12715 matches found
MGASA-2024-0215 Updated 0-plugins-base packages fix security vulnerability
GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...
CGA-47G2-MRJ3-G2FM
Bulletin has no description...
CGA-9HVQ-82Q7-3X99
Bulletin has no description...
CGA-M77G-3XQ5-35WM
Bulletin has no description...
CGA-VQW5-HPMV-3GX7
Bulletin has no description...
CGA-C9VF-XXWH-VQM5
Bulletin has no description...
CGA-X3F4-6WP4-2JVR
Bulletin has no description...
CGA-55CM-MPJR-XWJX
Bulletin has no description...
CGA-27VX-GJ95-FHVQ
Bulletin has no description...
CVE-2024-37160 Formwork has a Cross-site scripting (XSS) vulnerability in Description metadata
Formwork is a flat file-based Content Management System CMS. An attackers requires administrator privilege to execute arbitrary web scripts by modifying site options via /panel/options/site. This type of attack is suitable for persistence, affecting visitors across all pages except the dashboard...
CGA-8582-G4GH-CP8P
Bulletin has no description...
CGA-Q3V3-598J-XF3J
Bulletin has no description...
CGA-XF88-Q8VQ-29JM
Bulletin has no description...
CGA-M64H-75V3-JX65
Bulletin has no description...
CGA-PH5Q-343Q-P86G
Bulletin has no description...
CGA-P668-WGX9-2CR7
Bulletin has no description...
CGA-2F58-3FH8-QWRR
Bulletin has no description...
CGA-V45G-QMWQ-PQJJ
Bulletin has no description...
s2n-tls has a potentially observable differences in RSA premaster secret handling
When receiving a message from a client that sent an invalid RSA premaster secret, an issue in s2n-tls results in the server performing additional processing when the premaster secret contains an incorrect client hello version. While no practical attack on s2n-tls has been demonstrated, this cause...