1908 matches found
SUSE CVE-2018-18701
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions nextistypequal and cplusdemangletype in cp-demangle.c. Remote attackers could leverage this vulnerability t...
SUSE CVE-2018-20712
A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...
SUSE CVE-2019-9070
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in dexpression1 in cp-demangle.c after many recursive calls...
SUSE CVE-2019-9071
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in dcounttemplatesscopes in cp-demangle.c after many recursive calls...
SUSE CVE-2019-11251
The Kubernetes kubectl cp command in versions 1.1-1.12, and versions prior to 1.13.11, 1.14.7, and 1.15.4 allows a combination of two symlinks provided by tar output of a malicious container to place a file outside of the destination directory specified in the kubectl cp invocation. This could be...
CVE-2023-23464: Permissive Cross-domain Policy with Untrusted Domains
Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...
PT-2023-18973
Name of the Vulnerable Software and Affected Versions Media CP Media Control Panel latest version Description A Permissive Flash Cross-domain Policy in the Media CP Media Control Panel may allow information disclosure. Recommendations For the Media CP Media Control Panel latest version, consider...
CVE-2023-23465
The CVE-2023-23465 entry concerns Media CP Media Control Panel with a CSRF vulnerability via an unspecified endpoint. Affected: Media CP Media Control Panel (no product/version details provided in the documents). Root cause: CSRF without details on the vulnerable endpoint or parameters. Impact: h...
PT-2023-18975
Name of the Vulnerable Software and Affected Versions Media CP Media Control Panel affected versions not specified Description The issue is related to insufficient protection of credential changes. Recommendations At the moment, there is no information about a newer version that contains a fix fo...
CVE-2023-23466
Technical details about CVE-2023-23466 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2023-23465: Cross-Site Request Forgery (CSRF)
Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint...
CVE-2023-23467
Media CP Media Control Panel shows a reflected XSS vulnerability via an unspecified endpoint. The Connected documents consistently describe reflected XSS without detailing affected versions, exploit specifics, or a fix. No remediation information is provided in the supplied sources; monitor for u...
CVE-2023-23466: Insufficiently Protected Credentials
Media CP Media Control Panel latest version. Insufficiently protected credential change...
CVE-2023-23467: Improper Neutralization of Input During Web Page Generation
Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...
WordPress Google Maps CP Plugin <= 1.0.43 is vulnerable to Broken Access Control
Software Google Maps CP Type Plugin Vulnerable versions = 1.0.43 Fixed in 1.0.44 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25039 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c47b9f1f0687 Credits István Márton Required...
PT-2023-13609 · Mega · Mega Hopex
Name of the Vulnerable Software and Affected Versions: Mega HOPEX versions 15.2.0.6110 through V5CP2 Description: The application is prone to reflected Cross-site Scripting XSS in several features. Recommendations: For Mega HOPEX versions 15.2.0.6110 through V5CP2, update to a version after V5CP2...
MyBB < 1.8.33 Directory Traversal Vulnerability
MyBB is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb"; ifdescription...
CVE-2022-45867
MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with high privileges, to achieve local file inclusion and execution...
Directory traversal
MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with high privileges, to achieve local file inclusion and execution...
