org.eclipse.leshan:leshan-all (0.1.11-m1), org.eclipse.leshan:leshan-bs-server (0.1.11-m1) +5 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m1)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m1 - org.eclipse.leshan:leshan-bs-server 0.1.11-m1 -...

org.eclipse.leshan:leshan-all (0.1.11-m2), org.eclipse.leshan:leshan-bs-server (0.1.11-m2) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m2)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m2 - org.eclipse.leshan:leshan-bs-server 0.1.11-m2 -...

org.eclipse.leshan:leshan-all (0.1.11-m6), org.eclipse.leshan:leshan-bs-server (0.1.11-m6) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m6)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m6 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m6 - org.eclipse.leshan:leshan-bs-server 0.1.11-m6 -...

PT-2023-27023 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev449-g5948e4f70-master Description: The issue is related to a heap-use-after-free vulnerability via the gf bs align function at bitstream.c. This allows attackers to cause a Denial of Service DoS by supplying a crafted...

bs-cia.org Cross Site Scripting vulnerability OBB-3564047

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bs-tube.dk Cross Site Scripting vulnerability OBB-3504319

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

libshare-0.0.26.so Heap Buffer Overflow Privilege Escalation

The vulnerability of the bsSetLimitCliinfo function in the /lib/libshare-0.0.26.so file of the LB-LINK router software is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full...

Cross site scripting

Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on a legitimate user's web browser. The affected products and versions are as follows: BS-GS2008 firmware Ver. 1.0.10.01...

CVE-2023-24464

Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on a legitimate user's web browser. The affected products and versions are as follows: BS-GS2008 firmware Ver. 1.0.10.01...

CVE-2023-26588: Exposure of Resource to Wrong Sphere

Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016...

CVE-2023-24464: Improper Neutralization of Input During Web Page Generation

Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on a legitimate user's web browser. The affected products and versions are as follows: BS-GS2008 firmware Ver. 1.0.10.01...

Ubuntu 18.04 LTS / 20.04 LTS : Firefox regressions (USN-5954-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5954-2 advisory. USN-5954-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the...

[SECURITY] Fedora 38 Update: loudgain-0.6.8-13.fc38

loudgain is a versatile ReplayGain 2.0 loudness normalizer, based on the EBU R128/ITU BS.1770 standard -18 LUFS and supports FLAC/Ogg/MP2/MP3/MP4/M4A/ALAC/Opus/ASF/WMA/WAV/WavPack/AIFF/APE audio files. It uses the well-known mp3gain commandline syntax but will never modify the actual audio data...

Fedora: Security Advisory for loudgain (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

K35263486: libarchive vulnerability CVE-2016-8688

Security Advisory Description The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service crash via a crafted file, which triggers an invalid read in the 1 detectform or 2 bidentry function in...

UBUNTU-CVE-2022-47654

GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gfhevcreadspsbsinternal function of mediatools/avparsers.c:8261...

UBUNTU-CVE-2022-47089

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gfvvcreadspsbsinternal function of mediatools/avparsers.c...

CVE-2022-4637

A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.8.0 is able to address this issue. The name of the patch is...

Cross site scripting

A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.8.0 is able to address this issue. The name of the patch is...

CVE-2022-4637

A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.8.0 is able to address this issue. The name of the patch is...