811 matches found
PT-2021-24215
Name of the Vulnerable Software and Affected Versions: gpac version 1.1.0 Description: An invalid pointer reference issue exists via the gf svg node del function, causing a segmentation fault and application crash. Recommendations: For gpac version 1.1.0, consider avoiding the use of the gf svg...
CVE-2020-29177
Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \appdel.php...
PT-2021-7476
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A critical issue has been found in the Linux Kernel, specifically in the del timer function of the drivers/isdn/mISDN/l1oip core.c file, which is part of the Bluetooth component. This...
CVE-2021-24711
The delreistereddomains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CSRF checks, and is vulnerable to a CSRF attack...
PT-2021-16214
Name of the Vulnerable Software and Affected Versions Software License Manager WordPress plugin versions prior to 4.5.1 Description The issue concerns a lack of CSRF checks in the del reistered domains AJAX action, making it susceptible to a CSRF attack. This allows an attacker to potentially...
PT-2021-10504
Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: A Cross-Site Request Forgery CSRF issue allows authenticated attackers to delete all users via the API endpoint "admin.php/admin/admin/del/ids/.html". Recommendations: For Maccms version 10, as a temporary...
CVE-2020-20514: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/ .html allows authenticated attackers to delete all users...
UBUNTU-CVE-2021-32270
An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwidboxdel located in boxcodebase.c. It allows an attacker to cause Denial of Service...
Prototype Pollution
object-path is vulnerable to Prototype Pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype via the del function...
PT-2021-21941 · Npm +2 · Object-Path +2
Name of the Vulnerable Software and Affected Versions: object-path affected versions not specified Description: The issue is related to Improperly Controlled Modification of Object Prototype Attributes, also known as 'Prototype Pollution'. This occurs because the del function does not properly...
PT-2021-27738
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves several functions: zend string release, zend closure free...
PT-2021-27727
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, specifically a READ 4 crash type. The crash state involves several functions: zend string release,...
PT-2021-29943
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for exploitation have not been fully determined...
PT-2021-29837
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. This problem has been identified but its actual impact and potential for...
PT-2021-29879
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description A potential issue exists where a use-after-free condition could be triggered by calling del timer sync. The actual impact and likelihood of an attack have not been confirmed. Recommendations...
PT-2021-25917
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for attack have not been confirmed. Recommendation...
PT-2021-25842
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for exploitation have not been confirmed...
PT-2021-29912
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for exploitation have not been confirmed...
PT-2021-25660
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.4 Description: The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for attack have not been confirmed...
PT-2021-25800
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for attack have not been confirmed. Recommendation...