The vulnerability of the Eclipse Mosquitto messaging broker, related to buffer overflows in dynamic memory, allows an attacker to gain access to confidential information.

The vulnerability of the Eclipse Mosquitto messaging broker is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

WordPress plugin Dynamic Post Grid Elementor Addon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

PT-2024-34981 · Elementor · Dynamic Post Grid Elementor Addon

Name of the Vulnerable Software and Affected Versions: Dynamic Post Grid Elementor Addon versions 1.0.0 through 1.0.6 Description: The issue affects the Dynamic Post Grid Elementor Addon, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a...

PT-2024-34813 · Vivwebs · Dynamic Widgets

Name of the Vulnerable Software and Affected Versions: Vivwebs Dynamic Widgets versions 1.6.4 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Dynamic Widgets plugin. This allows an attacker to perform unintended actions on a user's website. Users are urged to update t...

WordPress plugin SmartLink Dynamic URLs 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Dynamic URL SEO plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Dynamic URL SEO versions = 1.0...

Veritas NetBackup 安全漏洞

Veritas Technologies Veritas NetBackup is a powerful enterprise-class data backup management software from Veritas Technologies, USA. A security vulnerability exists in Veritas NetBackup versions prior to 10.5 that stems from the fact that if a user executes specific commands or is forced to...

WordPress Dynamic URL SEO Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Dynamic URL SEO Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52470 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f710c58fedfc Credits Mika Required privilege...

The vulnerability of the ODXSW_DLL.dll library in software for simulation, design, and drafting in AutoCAD allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the ODXSWDLL.dll library, which is used in AutoCAD software for simulation, design, and drafting, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability of Adobe Illustrator’s graphic editor lies in the overflow of buffers in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2024-11237

A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3vT TTV6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack-based buffer overflow. The attack may be...

The vulnerability of PDF viewing and editing programs like Acrobat Reader lies in the improper use of dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Acrobat Reader is related to the improper use of dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Clementine 安全漏洞

Clementine is a multi-platform music player from the Clementine open source. A security vulnerability exists in Clementine v1.3.1, which originated from a vulnerability that allows local attackers to execute arbitrary code via a crafted DLL file...

The vulnerabilities of the CC5Dll.dll and ASMBASE228A.dll libraries, which are software libraries for modeling, designing, and drafting in AutoCAD, allow attackers to execute arbitrary code or cause the application to crash.

The vulnerability of the CC5Dll.dll and ASMBASE228A.dll libraries, which are used in AutoCAD software for simulation, design, and drafting, stems from a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or...

The vulnerability of the Adobe Illustrator graphic editor arises from overflowing buffer spaces in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created file...

Important: Red Hat Security Advisory: openexr security update

An update for openexr is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

PT-2024-11915 · Undefined · Undefined

CVE-2024-50986 CVE-20224-50986 DLL Hijacking Exploit for Clementine Description: An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. Version Affected: Clementi... https://t.co/QByf3fJ8GI...

ROS-20241112-05

A vulnerability in the XkbSetCompatMap function of the X Window System X.Org Server implementation is related to a buffer overflow in dynamic memory. buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker to escalate privileges...

PT-2024-34485 · Unknown · Clementine

Name of the Vulnerable Software and Affected Versions: Clementine version 1.3.1 Description: The issue allows a local attacker to execute arbitrary code via a crafted DLL file. This can be exploited by a local attacker. Recommendations: For Clementine version 1.3.1, consider restricting access to...

Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...