73 matches found
UBUNTU-CVE-2023-4678
Divide By Zero in GitHub repository gpac/gpac prior to 2.3-DEV...
PaddlePaddle 代码问题漏洞
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle version 2.5.0 before there is a security vulnerability , the vulnerability stems from the PaddlePaddle paddle.flip function in the existence of a null pointer dereference Null pointer...
PT-2023-4014 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.6.3 Description: The issue is related to improper authorization in Apache Airflow, allowing unauthorized read access to a DAG through a specially crafted URL. This could enable a remote attacker to disclose...
CVE-2023-1267 SQLi in Ulkem Company's PtteM Kart
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ulkem Company PtteM Kart. This issue affects PtteM Kart: before 2.1...
GPAC 安全漏洞
GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.3.0-DEV that stems from the presence of a heap-based buffer overflow...
PT-2023-12663 · Intel · Crypto Api Toolkit For Intel Sgx
Name of the Vulnerable Software and Affected Versions: Crypto API Toolkit for IntelR SGX versions prior to 2.0 commit ID 91ee496 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access...
SUSE CVE-2015-3294
The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...
SUSE CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping...
thisAAY Lazy Mouse 访问控制错误漏洞
thisAAY Lazy Mouse is a mouse application from thisAAY. A security vulnerability exists in versions prior to thisAAY Lazy Mouse 2.0.1, which stems from a default configuration that does not require a password and allows an unauthenticated remote user to execute arbitrary code without prior...
CVE-2022-1578 My wpdb < 2.5 - Arbitrary SQL Query via CSRF
The My wpdb WordPress plugin before 2.5 is missing CSRF check when running SQL queries, which could allow attacker to make a logged in admin run arbitrary SQL query via a CSRF attack...
PYSEC-2022-42983
In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API...
MB CONNECT LINE mymbCONNECT24 安全漏洞
MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE, Germany. A security vulnerability exists in MB CONNECT LINE mymbCONNECT24, mbCONNECT24, Helmholz myREX24, and myREX24.virtual v2.11.2 and prior versions, which originates from a...
PT-2022-7691 · Tinygltf +2 · Tinygltf +2
Name of the Vulnerable Software and Affected Versions: tinygltf versions prior to 2.6.0 Description: The tinygltf library has an issue related to the use of the C library function wordexp for file path expansion on untrusted paths from input files. This allows for command injection using backtick...
Vite 路径遍历漏洞
Vite is a new front-end build tool open-sourced by Vite. A security vulnerability exists in versions prior to Vite v2.9.13 that stems from a vulnerability that allows an attacker to perform directory traversal of a victim's service via a crafted URL...
CVE-2022-30229
A vulnerability has been identified in SICAM GridEdge Classic All versions V2.6.6. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user's id is known...
TRENDnet TI-PG1284i 代码问题漏洞
The TRENDnet TI-PG Series is a series of switches from TRENDnet. A security vulnerability exists in TRENDnet TI-PG1284i versions prior to 2.0.2.S0, which can be exploited by an attacker to crash a process by sending a crafted lldp packet to the device...
ALPINE-CVE-2021-46143
In doProlog in xmlparse.c in Expat aka libexpat before 2.4.3, an integer overflow exists for mgroupSize...
PT-2021-16151 · WordPress · Visual Link Preview
Name of the Vulnerable Software and Affected Versions: Visual Link Preview WordPress plugin versions prior to 2.2.3 Description: The issue allows any authenticated user to call several AJAX actions without proper authorization, due to the CSRF nonce being displayed for all authenticated users. Th...
AZL-6751 CVE-2021-33289 affecting package ntfs-3g for versions less than 2021.8.22-1
In NTFS-3G versions 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution...