4853 matches found
CVE-2023-6862
A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR 115.6 and Thunderbird 115.6...
CVE-2023-6862
A use-after-free was identified in the nsDNSService::Init. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR 115.6 and Thunderbird 115.6...
PT-2023-8394 · Nginx-Ui · Nginx-Ui
Name of the Vulnerable Software and Affected Versions: Nginx-UI versions prior to 2.0.0.beta.9 Description: The issue concerns arbitrary command execution by abusing configuration settings in Nginx-UI, a web interface for managing Nginx configurations. The Home Preference page exposes system...
PT-2023-35650 · Git +1 · Libavc
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write crash. Technical details about the crash include the functions isvcd start of pic, isvcd parse decod...
PT-2024-14638
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible NULL pointer dereference in the wfx set mfp ap function has been resolved. The ieee80211 beacon get function can return NULL, and wfx set mfp ap should check the return value...
libxml2: crafted xml can cause global buffer overflow
A flaw was found in Libxml2, where it contains a global buffer overflow via the xmlSAX2StartElement function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a denial of service DoS by supplying a crafted XML file...
PHPJabbers Appointment Scheduler 3.0 Missing Rate Limiting
Exploit Title: PHPJabbers Apointment Scheduler v3.0 - No Rate Limit in Email Date: 19/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/appointment-scheduler/ Version: v3.0 Tested on: Windows...
Improper Authorization
openjdk is vulnerable to Improper Authorization. An unauthenticated attacker with network access via multiple protocols is able to potentially compromise the system and gain unauthorized access to some data. This vulnerability requires human interaction and primarily affects Java deployments...
PT-2023-35610 · Git +1 · Libavc
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write crash. Technical details about the crash include the functions isvcd start of pic, isvcd parse decod...
The vulnerability of the batadv_dat_start_timer() function in the distributed-arp-table.c module of the B.A.T.M.A.N. network interface card of the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the batadvdatstarttimer function in the distributed-arp-table.c module of the B.A.T.M.A.N. network interface card of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a service failure...
Exploit for Incorrect Comparison in Dynamic-Linq Linq
Dynamic Linq injection to RCE - CVE-2023-32571 About Dynami...
PT-2023-9143 · Unknown +2 · Stb Vorbis.C +2
Name of the Vulnerable Software and Affected Versions: stb vorbis.c version 1.22 Description: A heap-based buffer overflow vulnerability exists in the comment functionality of stb vorbis.c. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file ...
kernel: Linux kernel: Denial of Service in s390/lcs network driver due to incompatible function pointer type
A flaw was found in the Linux kernel's s390/lcs network driver. An incorrect function pointer type in the lcsstartxmit function could lead to a system crash or termination of a process. This issue arises when Kernel Control Flow Integrity kCFI, a security feature designed to prevent certain types...
The vulnerability of the bfd_pef_scan_start_address function in the bfd/pef.c component of the GNU Binutils development environment allows a attacker to cause a service failure.
The vulnerability of the bfdpefscanstartaddress function in the bfd/pef.c component of the GNU Binutils development environment is related to pointer overwriting errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...
CVE-2023-47037 Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access)
We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then. Apache Airflow, versions before 2.7.3, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have the...
tang security update
14-2 - Fix service start up 14-1 - New upstream release - v14. Resolves: rhbz2182411 Resolves: CVE-2023-1672...
The vulnerability of the auth_start_session() function on the XRDP server allows a hacker to trigger a service failure.
The vulnerability of the authstartsession function on the XRDP server relates to bypassing session restrictions. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2023-46764
Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliciously...
