8821 matches found
SSRF vulnerability in bitbucket-push-and-pull-request allows capturing credentials
bitbucket-push-and-pull-request provides a webhook endpoint at /bitbucket-hook/ to receive webhook notifications. When acting on these notifications, bitbucket-push-and-pull-request 2.4.0 through 2.8.3 both inclusive trusts values provided in the webhook payload, including certain URLs, and uses...
Apache Superset 安全漏洞
Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset version 2.1.0 and prior versions have an authorization issue vulnerability that stems from incorrect authorization checks in SQLLab. An attacker can exploit the vulnerability to...
mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server
A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0...
CVE-2023-3616
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mava Software Hotel Management System allows SQL Injection.This issue affects Hotel Management System: before 2.0...
CVE-2023-35065
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Osoft Paint Production Management allows SQL Injection. This issue affects Paint Production Management: before 2.1...
kernel: buffer overflow in ceph file net/ceph/messenger_v2.c
An flaw was found in net/ceph/messengerv2.c in the Linux Kernel. An integer signing error leads to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This issue occurs due to an untrusted length taken from a TCP packet in cephdecode32...
Bolo Code Issue Vulnerability
Bolo is a Java-based pineapple blogging system, simple and easy to deploy, exquisite theme, intimate service, designed for programmers. A security vulnerability exists in Bolo v.2.6, which stems from a file upload issue...
Digita Information Technology Smartrise Document Management System SQL Injection Vulnerability
Digita Information Technology Smartrise Document Management System is a document management system from Digita Information Technology, Turkey. A SQL injection vulnerability exists in Digita Information Technology Smartrise Document Management System Hvl-2.0 prior versions, which stems from...
httpd system Code Execution
The vulnerability of the httpd microprogramming system in NETGEAR R6400v2 Wi-Fi routers lies in the fact that the execution of operations goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web page...
UBUNTU-CVE-2023-4756
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...
GPAC Buffer Error Vulnerability
GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.3-DEV that stems from the presence of a stack-based buffer overflow issue...
OESA-2023-1581 libreswan security update
Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. Security Fixes: An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains ...
GPAC Input Validation Error Vulnerability
GPAC is an open source multimedia framework. An input validation error vulnerability exists in versions prior to gpac 2.3-DEV that stems from the presence of an integer overflow or wrap-around issue...
DEBIAN-CVE-2023-40567
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the cleardecompressbandsdata function in which there is no offset validation. Abuse of this vulnerability may lead to an out of bounds...
DEBIAN-CVE-2023-4682
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...
PT-2023-5233 · Ptc +1 · Thingworx Kepware Server +1
Name of the Vulnerable Software and Affected Versions: Kepware KEPServerEX versions affected versions not specified ThingWorx Kepware Server versions affected versions not specified Description: The issue is related to insufficient input validation, which can be exploited by an adversary to gain...
golang: net/http: handle server errors after sending GOAWAY
A flaw was found in the golang package. In net/http in Go, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if a fatal error preempts the shutdown...
CVE-2023-28415
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in XootiX Side Cart Woocommerce Ajax plugin = 2.2 versions...
Webmin Usermin 跨站脚本漏洞
Webmin Usermin is a web-based interface from Webmin Inc. Used for webmail, password change, mail filters, fetchmail and more. A cross-site scripting vulnerability exists in Webmin Usermin version 2.001. The vulnerability stems from the application's lack of effective filtering and escaping of...