811 matches found
PT-2021-29734
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.52 Description The issue is related to a possible use-after-free condition by calling del timer sync. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-29655
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.4 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. This problem is noted in an automated ID aimed at discovering potential security...
UBUNTU-CVE-2021-3640
A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...
PT-2024-11352 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a possible use-after-free in the nicstar cleanup function. The problem arises because the del timer function does not wait for the timer handler to finish, whic...
CVE-2020-17563
Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admin-tpl-del&id="...
CVE-2020-17563: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admin-tpl-del&id="...
PT-2021-10106
Name of the Vulnerable Software and Affected Versions: FeiFeiCMS version 4.0 Description: The issue allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the "/index.php?s=/admin-tpl-del&id=" API endpoint. The id variable is used in this process. Recommendations:...
PT-2021-11891 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 1.0.1 Description: An issue was discovered in the function gf isom box del in isomedia/box funcs.c, which is a use-after-free. Recommendations: For GPAC version 0.8.0, update to a version that fixes the...
cafe-del-mar.ch Cross Site Scripting vulnerability OBB-1319860
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
libreriadelsanto.it Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1184373 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
comune.volpago-del-montello.tv.it Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1151003 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...
PT-2020-12692
Name of the Vulnerable Software and Affected Versions GPAC version 0.8.0 Description An issue in libgpac.a, as demonstrated by MP4Box, leads to improper decision-making in audio sample entry Read in isomedia/box code base.c regarding gf isom box del calls. This results in use-after-free outcomes...
PT-2019-16109
Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function gf isom box del in isomedia/box funcs.c, which results in a NULL pointer dereference. Recommendations For GPAC version 0.8.0, there is n...
CVE-2019-17073: Improper Limitation of a Pathname to a Restricted Directory
emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...
alcala-del-valle.listado-empresas.es Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-980168 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
torre-del-mar.listado-empresas.es Cross Site Scripting vulnerability
Security Researcher Gh05tPT Helped patch 6836 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting torre-del-mar.listado-empresas.es website and its users...
san-jose-del-valle.listado-empresas.es Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-980021 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2019-16677
An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF...
PT-2019-14762
Name of the Vulnerable Software and Affected Versions idreamsoft iCMS version 7.0 Description An issue was discovered that allows Cross-Site Request Forgery CSRF attacks. The affected endpoint is "admincp.php?app=members&do=del". Recommendations For idreamsoft iCMS version 7.0, consider...
PT-2019-13862
Name of the Vulnerable Software and Affected Versions PRiSE adAS version 1.7.0 Description An issue was discovered where the path is not properly escaped in the metadata del method, leading to an arbitrary file read and deletion via Directory Traversal. Recommendations For PRiSE adAS version 1.7....