Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception due to an uncaught std::outofrange exception in PCLPointCloud2::at. An attacker can cause the application to crash by submitting specially crafted PLY files. Remediation There is no fixed version for pcl. References -...

PT-2024-35739 · Pcl +3 · Pcl +3

Name of the Vulnerable Software and Affected Versions: PCL version 1.14.1 Description: The issue occurs when parsing certain malformed PLY files, causing PCL to crash due to an uncaught std::out of range exception in PCLPointCloud2::at. This could potentially be exploited to cause a...

PCL 安全漏洞

PCL Point Cloud Library is an open source library for PCL. A security vulnerability exists in PCL version 1.14.1, which stems from an imperfection in its mechanism for handling exceptions, making it susceptible to denial-of-service attacks...

Malicious code in OCI.DotNetSDK.Datalabeling.service (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-32764

Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...

CVE-2023-1597

The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves ...

CVE-2023-1597

The CVE-2023-1597 entry corresponds to the tagDiv Cloud Library WordPress plugin and is supported by multiple connected documents. Affected software: tagDiv Cloud Library WordPress plugin prior to version 2.7. Root cause: lack of authorization and CSRF protection in an AJAX action that is accessi...

CVE-2023-1597 tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation

The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves ...

PT-2023-17106 · Tagdiv · Tagdiv Cloud Library

Name of the Vulnerable Software and Affected Versions: tagDiv Cloud Library WordPress plugin versions prior to 2.7 Description: The issue concerns a lack of authorisation and CSRF protection in an AJAX action, which can be accessed by both unauthenticated and authenticated users. This allows...

WordPress plugin tagDiv Cloud Library 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...

CVE-2023-1597: Undefined Security Weakness

The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves ...

WordPress tagDiv Cloud Library Plugin < 2.7 is vulnerable to Privilege Escalation

Software tagDiv Cloud Library Type Plugin Vulnerable versions 2.7 Fixed in 2.7 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-1597 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID d62f2f7e76e8 Credits Truoc Pha...

tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation

The plugin does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves as an admin of the blog. To set the user...

tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation

The plugin does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves as an admin of the blog. PoC To set the us...

pcl:ply_reader_fuzzer: Crash in pcl::PLYReader::read

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=4678430691557376 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerasanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff7ffd Crash...

pcl:ply_reader_fuzzer: Crash in void std::__1::__tree_balance_after_insert<std::__1::__tree_node_base<void*>*>

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6548399272361984 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffc00000000...

pcl:ply_reader_fuzzer: Crash in std::__1::basic_filebuf<char, std::__1::char_traits<char> >::underflow

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=5674014734942208 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000201d2472 Crash...

pcl:ply_reader_fuzzer: Heap-buffer-overflow in std::__1::__function::__func<std::__1::function<void

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=5949124252401664 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerasanpcl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

pcl:ply_reader_fuzzer: Heap-buffer-overflow in std::__1::__function::__func<std::__1::function<void

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=4987248612343808 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerasanpcl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

pcl:ply_reader_fuzzer: Heap-buffer-overflow in std::__1::__function::__func<std::__1::function<void

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=5677102214021120 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerasanpcl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...