CVE-2022-35021

Summary: CVE-2022-35021 affects OTFCC’s otfccdump (release-x64) with a global buffer overflow at 0x718693. Public CVSS shows 6.5 (Medium) with network attack vector, no privileges, user interaction required, and high availability impact. Root cause: global buffer overflow in otfccdump+0x718693. A...

CVE-2022-35021

OTFCC commit 617837b was discovered to contain a global buffer overflow via /release-x64/otfccdump+0x718693...

GHSA-WQR6-57QM-HHR5 Pimcore vulnerable to cross site scripting

If an attacker can control a script that is executed in the victim's browser, then they can typically fully compromise that user. Amongst other things, the attacker can perform any action within the application that the user can perform; view any information that the user is able to view; modify...

Stored XSS vulnerability in Jenkins DotCi Plugin

DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to submit crafted commit notifications to the...

GHSA-Q9G4-9FX4-V533 Stored XSS vulnerability in Jenkins DotCi Plugin

DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to submit crafted commit notifications to the...

CVE-2022-35038

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b064d...

PT-2022-22511 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC via the /release-x64/otfccdump+0x703969 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the /release-x64/otfccdump+0x703969...

CVE-2022-35032

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f...

CVE-2022-35023

OTFCC commit 617837b was discovered to contain a segmentation violation via /lib/x8664-linux-gnu/libc.so.6+0xbb384...

CVE-2022-35025

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8...

PT-2022-22507 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x4fbbb6 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

CVE-2022-35027

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7...

PT-2022-22512 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x6b6a8f endpoint. Recommendations: For OTFCC commit 617837b, consider avoiding the use of the...

PT-2022-22502 · Libc +2 · Libc +2

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC commit 617837b via the /lib/x86 64-linux-gnu/libc.so.6+0xbb384 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the /lib/x86...

CVE-2022-35022

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae...

PT-2022-22517 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue has been discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x6b064d endpoint. This issue can be exploited, potentially leading to security breaches. Recommendation...

PT-2022-22515 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC, specifically via the /release-x64/otfccdump+0x6e1fc8 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

CVE-2022-35029

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea...

CVE-2022-35036

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e1fc8...

CVE-2022-35034

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e7e3d...