6607 matches found
Fedora: Security Advisory for rubygem-actionpack (FEDORA-2023-d6157bb1e2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OSV-2023-257 Global-buffer-overflow in read_coding_unit
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57566 Crash type: Global-buffer-overflow READ 1 Crash state: readcodingunit readcodingquadtree readcodingquadtree...
CVE-2023-0197
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause a NULL-pointer dereference, which may lead to denial of service...
UBUNTU-CVE-2023-0181
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, where memory permissions are not correctly checked, which may lead to denial of service and data tampering...
[SECURITY] Fedora 38 Update: rubygem-actionpack-7.0.4.3-1.fc38
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling easy unit/integration testing that doesn't require a browser...
Risk Fact #4: Misconfigurations Still Prevalent in Web Applications
Qualys Blog Series – Threat Research Unit Report The Open Web Application Security Project OWASP Top 10 is a list of the most common and most critical vulnerabilities that can impact a web application. Security experts rely on the OWASP Top 10 when talking about web app security. The list helps...
Cisco IOS XE Software 安全漏洞
Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that originates from imprope...
CVE-2023-1559
A vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vulnerability affects unknown code of the file classes/Users.php?f=save. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...
CVE-2023-1559
CVE-2023-1559 affects SourceCodester Storage Unit Rental Management System 1.0, with a vulnerability in the file classes/Users.php?f=save that allows an attacker to perform an unrestricted upload. Multiple sources in the Connected documents corroborate the issue and describe remote exploitation p...
CVE-2023-1559 SourceCodester Storage Unit Rental Management System unrestricted upload
A vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vulnerability affects unknown code of the file classes/Users.php?f=save. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...
PT-2023-17075 · Sourcecodester · Sourcecodester Storage Unit Rental Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Storage Unit Rental Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Storage Unit Rental Management System. This issue affects the file classes/Users.php?f=save, leading to...
Sourcecodester Storage Unit Rental Management System 代码问题漏洞
Sourcecodester Storage Unit Rental Management System is a storage unit rental management system that helps manage storage unit rental business records and monitor their records. A code issue vulnerability exists in SourceCodester Storage Unit Rental Management System version 1.0, which is caused ...
Cross site scripting
The VK All in One Expansion Unit WordPress plugin before 9.87.1.0 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...
CVE-2023-0937 VK All in One Expansion Unit < 9.87.1.0 - Reflected XSS
The VK All in One Expansion Unit WordPress plugin before 9.87.1.0 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...
CVE-2023-0937 VK All in One Expansion Unit < 9.87.1.0 - Reflected XSS
The VK All in One Expansion Unit WordPress plugin before 9.87.1.0 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...
CVE-2023-0937
The CVE-2023-0937 entry concerns the VK All in One Expansion Unit WordPress plugin prior to 9.87.1.0. The root cause is failure to escape the $_SERVER[REQUEST_URI] value before echoing it into an attribute, enabling Reflected Cross-Site Scripting. Affected component is the WordPress plugin code h...
Namespace: Fusing will only result in namespaces containing font class 0, irrelevant of fused tiles
Lines of code Vulnerability details H-02 Namespace: Fusing will only result in namespaces containing font class 0, irrelevant of fused tiles After minting trays, a user can fuse tiles from multiple trays into a namespace. A tray tile specifies a character font class, the character's index and the...
WordPress Plugin VK All in One Expansion Unit 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2023-28116 Buffer overflow in L2CAP due to misconfigured MTU
Contiki-NG is an open-source, cross-platform operating system for internet of things IoT devices. In versions 4.8 and prior, an out-of-bounds write can occur in the BLE L2CAP module of the Contiki-NG operating system. The network stack of Contiki-NG uses a global buffer packetbuf for processing o...
