138 matches found
GHSA-XVQG-MV25-RWVW Parsing issue in matrix-org/node-irc leading to room takeovers
Impact Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. Patched The vulnerability has been patched in matrix-appservice-irc 0.35.0...
val-joanis.com Cross Site Scripting vulnerability OBB-2828985
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
val-ledourner.com Cross Site Scripting vulnerability OBB-2774696
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
OSV-2022-525 Heap-buffer-overflow in spvtools::CFA<spvtools::val::BasicBlock>::CalculateDominators
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48553 Crash type: Heap-buffer-overflow READ 8 Crash state: spvtools::CFA::CalculateDominators spvtools::val::PerformCfgChecks spvtools::val::ValidateBinaryUsingContextAndValidationState...
Rust 资源管理错误漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in stackdst crate before 0.6.1 for Rust, which stems from the pushinner behavior, with double free at val.clone.No detailed vulnerability details are provided at...
val-de-loire-41.com Cross Site Scripting vulnerability OBB-1192841
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lespaniersbioduvaldeloire.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1176321 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Debian: Security Advisory (DLA-2141-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-2141-1 yubikey-val - security update
Bulletin has no description...
[SECURITY] [DLA 2141-1] yubikey-val security update
Package : yubikey-val Version : 2.27-1+deb8u1 CVE ID : CVE-2020-10184 CVE-2020-10185 The following CVEs were reported against yubikey-val. CVE-2020-10184 The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a...
CVE-2019-7340: Improper Neutralization of Input During Web Page Generation
POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filterQueryterms0val' parameter value in the view filter filter.php because proper filtration is omitted...
CVE-2017-18283
Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660...
CVE-2017-18283
Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660...
CVE-2017-18283
CVE-2017-18283 describes a memory corruption issue in Qualcomm Snapdragon mobile platform components triggered by Read Val Blob Req with invalid parameters. Affected are Snapdragon variants QCA9379 and SD series: 210/212/205, 625, 835, 845, 850, and SDA660. The vulnerability context in the connec...
CVE-2017-18283: Improper Restriction of Operations within the Bounds of a Memory Buffer
Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660...
CVE-2014-4932: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php...
joyplus-cms SQL Injection Vulnerability
joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A SQL injection vulnerability exists in joyplus-c...
CVE-2018-14389
joyplus-cms 1.6.0 has SQL Injection via the manager/adminajax.php val parameter...