6011 matches found
Stack overflow during recursive JSON parsing
When parsing untrusted, deeply nested JSON, the stack may overflow, possibly enabling a Denial of Service attack. This was fixed by adding a check for recursion depth...
Advanced Database Cleaner < 3.1.4 - Administrator+ PHP Object Injection
Description The plugin is vulnerable to PHP Object Injection via deserialization of untrusted input in the 'processbulkaction' function. This makes it possible for authenticated attacker, with administrator access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin...
PT-2024-19995 · Unknown · Trillium-Http +1
Name of the Vulnerable Software and Affected Versions: trillium-http versions prior to 0.3.12 trillium-client versions prior to 0.5.4 Description: Insufficient validation of outbound header values may lead to request splitting or response splitting attacks in scenarios where attackers have...
PT-2024-1512 · Node.Js · Node.Js
Name of the Vulnerable Software and Affected Versions: network versions prior to 0.7.0 Description: The issue exists due to insufficient input validation in the child process exec function of the Node.js Network utility. This allows a remote attacker to execute arbitrary commands on the operating...
CVE-2023-49329
Anomali Match before 4.6.2 allows OS Command Injection. An authenticated admin user can inject and execute operating system commands. This arises from improper handling of untrusted input, enabling an attacker to elevate privileges, execute system commands, and potentially compromise the underlyi...
Command injection
Anomali Match before 4.6.2 allows OS Command Injection. An authenticated admin user can inject and execute operating system commands. This arises from improper handling of untrusted input, enabling an attacker to elevate privileges, execute system commands, and potentially compromise the underlyi...
PT-2024-13722 · Anomali · Anomali Match
Name of the Vulnerable Software and Affected Versions: Anomali Match versions prior to 4.6.2 Description: The issue arises from improper handling of untrusted input, enabling an attacker to inject and execute operating system commands. An authenticated admin user can elevate privileges, execute...
Anomali Match Security Vulnerability
Anomali Match is a big data security analytics engine from Anomali that automates threat detection, investigation and response. A security vulnerability exists in Anomali Match version 4.6.2 and prior versions, which stems from mishandling of untrusted input and could lead to an operating system...
Welcart e-Commerce < 2.9.6 - Admin+ PHP Object Injection
Description The plugin is vulnerable to PHP Object Injection in all versions up to 2.9.5 inclusive via deserialization of untrusted input in the welcartconfirmcheckajax function. This makes it possible for administrators to inject a PHP Object. No POP chain is present in the vulnerable plugin. If...
SUSE CVE-2023-6237
Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function EVPPKEYpubliccheck to check RSA public keys may experience long delays. Where the key that is being checked has been obtained from an untrusted source this may...
GTKWave Buffer Overflow Vulnerability
GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115, which stems from a boundary error in the FST LEB128 varint function when handling untrusted input, and can be exploited by an attacker to cause arbitrary code...
GTKWave buffer overflow vulnerability (CNVD-2024-04842)
GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115, which stems from a boundary error in the LXT2 lxt2rdexpandintegertobits function when handling untrusted input, and can be exploited by an attacker to cause...
Tenda AX12 安全漏洞
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A buffer overflow vulnerability exists in Tenda AX12 version V22.03.01.46. The vulnerability stems from an application boundary error when handling untrusted input. A remote attacker can exploit the vulnerability to cause ...
Medium: snakeyaml
Issue Overview: Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. CVE-2022-38750 Using snakeYAML to parse untrusted YAM...
GTKWave 缓冲区错误漏洞
GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115. The vulnerability stems from a boundary error in the fstReaderIterBlocks2 chaintable parsing function when processing untrusted input, which can be exploited by ...
PT-2024-15235 · Unknown · Chanzhaoyu Chatgpt-Web
Name of the Vulnerable Software and Affected Versions: Chanzhaoyu chatgpt-web version 2.11.1 Description: A problematic issue has been found in the software, affecting some unknown processing. The manipulation of the argument Description with the input leads to cross-site scripting. The attack ma...
Theme per user < 1.0.2 - Unauthenticated PHP Object Injection
Description The Theme per user plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 1.0.2 exclusive via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. If...
YITH WooCommerce Product Add-Ons < 4.3.1 - Authenticated(Shop Manager+) PHP Object Injection
Description The YITH WooCommerce Product Add-Ons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 4.3.1 exclusive via deserialization of untrusted input in the 'saveaddon' function. This makes it possible for authenticated attackers, with Shop Manager access and...
PT-2024-18983 · Vapor · Vapor
Name of the Vulnerable Software and Affected Versions: Vapor versions prior to 4.90.0 Description: Vapor is an HTTP web framework for Swift. The vapor urlparser parse function uses uint16 t indexes when parsing a URI's components, which may cause integer overflows when parsing untrusted inputs...