CVE-2024-0886: Improper Resource Shutdown or Release

A vulnerability classified as problematic was found in Poikosoft EZ CD Audio Converter 8.0.7. Affected by this vulnerability is an unknown functionality of the component Activation Handler. The manipulation of the argument Key leads to denial of service. Local access is required to approach this...

Ibexa ezplatform-kernel download route allows filename change

Impact The route used for file downloads allows specifying the name of the downloaded file. This is an unintended side effect of the implementation, and means one could construct download URLs with filenames that have no relation to the actual file, which could lead to misunderstandings and...

GHSA-946C-F9W6-2C25 Download route allows filename change in eZpublish kernel

Impact The route used for file downloads allows specifying the name of the downloaded file. This is an unintended side effect of the implementation, and means one could construct download URLs with filenames that have no relation to the actual file, which could lead to misunderstandings and...

Download route allows filename change in eZpublish kernel

Impact The route used for file downloads allows specifying the name of the downloaded file. This is an unintended side effect of the implementation, and means one could construct download URLs with filenames that have no relation to the actual file, which could lead to misunderstandings and...

PT-2023-33021 · Ez Systems +1 · Ezpublish-Kernel +4

Name of the Vulnerable Software and Affected Versions: Ibexa DXP and eZ Platform affected versions not specified ezsystems/ezplatform-kernel affected versions not specified ezsystems/ezpublish-kernel affected versions not specified ibexa/core affected versions not specified Description: The issue...

PT-2023-33018 · Ibexa · Ibexa Dxp +1

Name of the Vulnerable Software and Affected Versions: Ibexa DXP and eZ Platform versions affected versions not specified Description: The issue allows specifying the name of the downloaded file in the route used for file downloads, which could lead to misunderstandings, confusion, and possibly...

ez-fashion.de Cross Site Scripting vulnerability OBB-3621595

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in ez-retro-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6931a4e6135ad2a4f946c7218b4fcf31f1efc0c75f0d58f96e9a5fa793a0e144 The OpenSSF Package Analysis project identified 'ez-retro-server' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7916 Malicious code in ez-retro-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6931a4e6135ad2a4f946c7218b4fcf31f1efc0c75f0d58f96e9a5fa793a0e144 The OpenSSF Package Analysis project identified 'ez-retro-server' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-37734

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

CVE-2023-37734

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

Buffer overflow

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

EZ SoftMagic MP3 Audio Converter Security Vulnerability

EZ SoftMagic MP3 Audio Converter is an MP3 audio editor from EZ SoftMagic. A security vulnerability exists in EZ SoftMagic MP3 Audio Converter version 2.7.3.700, which originated from a vulnerability that could allow an attacker to execute arbitrary code or crash the application by overflowing th...

CVE-2023-37734

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

CVE-2023-37734: Buffer Copy without Checking Size of Input

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

PT-2023-26084 · Unknown · Ez Softmagic Mp3 Audio Converter

Name of the Vulnerable Software and Affected Versions: EZ softmagic MP3 Audio Converter version 2.7.3.700 Description: A buffer overflow issue was discovered in the software. Recommendations: For EZ softmagic MP3 Audio Converter version 2.7.3.700, at the moment, there is no information about a...

CVE-2023-37734

Summary of CVE-2023-37734 : The vulnerability affects EZ softmagic MP3 Audio Converter 2.7.3.700. Multiple sources describe a buffer overflow in this software, which is the underlying root cause cited in CVE records. The NVD entry reports a CVSS v3.1 base score of 9.8 (Critical) with impacts on c...

CVE-2023-37734

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

CVE-2020-23065

Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attacker to execute arbitrary code via the video-js.swf...

CVE-2020-23065

Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attacker to execute arbitrary code via the video-js.swf...