199 matches found
@buckeye/bs-layered-config (>=1.0.0, <=1.2.0), reason-nconf (>=1.2.0, <=1.3.2) potentially affected by CVE-2021-25946 via nconf-toml (0.0.2)
nconf-toml NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on nconf-toml and may be impacted: - @buckeye/bs-layered-config =1.0.0, =1.2.0, =1.3.2 Source cves: CVE-2021-25946 Source advisory: GHSA-HX7J-43W2-7RJ7...
CVE-2021-32471
Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example, a tape head may have an unexpected location after the processing of input composed of As and Bs instead of 0s and 1s...
PT-2021-18573
Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue arises in the gf hevc read pps bs internal function, located in media tools/av parsers.c. A crafted file can cause pps-num tile columns to be larger than sizeofpps-column width, resulting in a heap...
PT-2021-28079
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the following functions: ih264d fill bs1 16x16mb pslice, ih264d compute bs non...
PT-2020-22161
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, which can cause a crash. The crash occurs in the following functions: ih264d fill bs1 16x16mb pslice...
bs-tek.co.kr Cross Site Scripting vulnerability OBB-1453829
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Malicious Package in bs-sha3
Version 0.8.0 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised...
bs-preact (0.0.4) potentially affected by unknown CVE via preact (10.0.0-alpha.2)
preact NPM version 10.0.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on preact and may be impacted: - bs-preact 0.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-CG48-9HH2-X6MX...
bs-preact (0.0.4) potentially affected by unknown CVE via preact (10.0.0-alpha.2)
preact NPM version 10.0.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on preact and may be impacted: - bs-preact 0.0.4 Source cves: unknown CVE Source advisory: GHSA-CG48-9HH2-X6MX...
bs-sundermann.de Cross Site Scripting vulnerability OBB-1237554
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bs-servise.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1190037 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
UBUNTU-CVE-2019-20630
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BSReadByte called from gfbsreadbit in utils/bitstream.c that can cause a denial of service via a crafted MP4 file...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2020:0411-1)
This update for ImageMagick fixes the following issues : Security issue fixed : CVE-2019-19948: Fixed a heap-based buffer overflow in WriteSGIImage bsc1159861. CVE-2019-19949: Fixed a heap-based buffer over-read in WritePNGImage bsc1160369. Non-security issue fixed: Fixed an issue where convertin...
CVE-2014-4198
A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that neglects the use of ADPswID and AD parameters, which could let a malicious user access privileged function...
Authentication flaw
A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that neglects the use of ADPswID and AD parameters, which could let a malicious user access privileged function...
CVE-2014-4198
A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that neglects the use of ADPswID and AD parameters, which could let a malicious user access privileged function...
CVE-2014-4198
The vulnerability CVE-2014-4198 affects BS-Client Private Client, versions 2.4 and 2.5. A flaw in the authentication flow allows a two-factor bypass via an XML request that omits ADPswID and AD parameters, enabling a malicious user to access privileged functions. Root cause stated as improper han...
PT-2020-7674
Name of the Vulnerable Software and Affected Versions BS-Client Private Client versions 2.4 through 2.5 Description A Two-Factor Authentication Bypass issue exists, allowing a malicious user to access privileged functions via an XML request. This request neglects the use of ADPswID and AD...
CVE-2014-4198: Improper Authentication
A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that neglects the use of ADPswID and AD parameters, which could let a malicious user access privileged function...
bs-citysued.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1075707 Security Researcher geeknik Helped patch 8722 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting bs-citysued.de website and...