1406 matches found
CVE-2024-21527
Versions of the package github.com/gotenberg/gotenberg/v8/pkg/gotenberg before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/chromium before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/webhook before 8.1.0 are vulnerable to Server-si...
CVE-2024-21527
Versions of the package github.com/gotenberg/gotenberg/v8/pkg/gotenberg before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/chromium before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/webhook before 8.1.0 are vulnerable to Server-si...
PT-2024-18941
Name of the Vulnerable Software and Affected Versions github.com/gotenberg/gotenberg/v8/pkg/gotenberg versions prior to 8.1.0 github.com/gotenberg/gotenberg/v8/pkg/modules/chromium versions prior to 8.1.0 github.com/gotenberg/gotenberg/v8/pkg/modules/webhook versions prior to 8.1.0 Description Th...
CVE-2024-21527: Server-Side Request Forgery (SSRF)
Versions of the package github.com/gotenberg/gotenberg/v8/pkg/gotenberg before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/chromium before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/webhook before 8.1.0 are vulnerable to Server-si...
PT-2024-40085
Name of the Vulnerable Software and Affected Versions: TinyMCE version 6 Description: The issue arises from a configuration value convert unsafe embeds set to false, allowing svg files with javascript to be used in or tags, potentially leading to XSS attacks. Note that tags are not allowed by...
OSV-2024-637 Heap-buffer-overflow in ih264d_format_convert
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69682 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert isvcdvideodecode isvcdapifunction...
PT-2024-40810 · Git +1 · Libavc
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow issue is reported, which can cause a crash. The crash occurs in the ih264d format convert and ih264d decode picture thread...
CLSA-2024-1720094351 glibc: Fix of 2 CVEs
Fix a memory leak in converthostenttogaihaddrtuple function with AIALL - CVE-2023-4806: fix memory access issue in getaddrinfo function by implementing nssgethostbyname3r hook - CVE-2023-4813: fix memory leakage in gaihinet function to prevent application crash when getaddrinfo function is called...
The vulnerability of the im_convert_path/im_identify_path function in the RoundCube Webmail client allows a hacker to exploit their privileges.
The vulnerability of the imconvertpath/imidentifypath function in the RoundCube Webmail email client is related to the lack of measures taken at the administrative level to clean up data. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
CVE-2024-5979 Denial of Service via Invalid Argument in h2oai/h2o-3
In h2oai/h2o-3 version 3.46.0, the runtool command in the rapids component allows the main function of any class under the water.tools namespace to be called. One such class, MojoConvertTool, crashes the server when invoked with an invalid argument, causing a denial of service...
Pytorch-Lightning Code Issue Vulnerability
Pytorch-Lightning is an open source lightweight PyTorch wrapper open-sourced by Lightning AI in the US. Used for high performance Ai research. A code issue vulnerability exists in Pytorch-Lightning version v2.2.4, which stems from the runtool command in the rapids component that allows the main...
Malicious code in ng-filter-convert (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2755 Malicious code in ng-filter-convert (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-36684
Missing Authorization vulnerability in Brainstorm Force Convert Pro.This issue affects Convert Pro: from n/a through 1.7.5...
CVE-2023-36684
Missing Authorization vulnerability in Brainstorm Force Convert Pro.This issue affects Convert Pro: from n/a through 1.7.5...
CVE-2023-36684 WordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brainstorm Force Convert Pro.This issue affects Convert Pro: from n/a through 1.7.5...
CVE-2023-36684
CVE-2023-36684 is a Missing Authorization vulnerability in Brainstorm Force Convert Pro (WordPress plugin) affecting Convert Pro ≤ 1.7.5. It is described as a Broken Access Control issue enabling unauthenticated access. Remediation from connected documents: update to a version newer than 1.7.5 (i...
CVE-2023-36684 WordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brainstorm Force Convert Pro.This issue affects Convert Pro: from n/a through 1.7.5...
PT-2024-12580 · Brainstorm Force · Convert Pro
Name of the Vulnerable Software and Affected Versions: Convert Pro versions 1.7.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in Brainstorm Force Convert Pro. Recommendations: For Convert Pro versions 1.7.5 and earlier, update to a version later than 1.7...