809 matches found
NULL Pointer Exception bug that can be used by a remote attacker
handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. Products Confirmed Not Affected Brocade Fabri...
PT-2023-26262 · Unknown · Revive Adserver
Name of the Vulnerable Software and Affected Versions: Revive Adserver versions 5.4.1 and earlier Description: A reflected XSS vulnerability exists. This issue may allow attackers to inject malicious scripts into websites, potentially leading to unauthorized access or control of user sessions...
Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability.
...
PYSEC-2023-159
RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...
CVE-2023-32241
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin = 5.4.8 versions...
PT-2023-6289 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.5.4 Description: The issue is related to a use-after-free error in the ext4 file system driver of the Linux kernel, specifically in the fs/ext4/extents status.c file, related to the ext4 es insert extent...
SUSE CVE-2022-28069
A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...
SUSE CVE-2022-28070
A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...
CVE-2022-28073
A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...
UBUNTU-CVE-2022-28070
A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...
radare2 缓冲区错误漏洞
radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a heap buffer overflow in the vaxopfunction method...
radare2 资源管理错误漏洞
radare2 is a set of libraries and tools for working with binaries. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a post-release reuse issue in the rregsetvalue method...
CVE-2023-28711
Insufficient control flow management in the Hyperscan Library maintained by IntelR before version 5.4.1 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-37372
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.4. The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database...
PT-2023-21920 · Unknown · Hyperscan Library
Name of the Vulnerable Software and Affected Versions: Hyperscan Library versions prior to 5.4.1 Description: Insufficient control flow management in the Hyperscan Library may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions prior...
WordPress Plugin WpStream – Live Streaming, Video on Demand, Pay Per View 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WpStream -...
Jenkins Plugin Datadog 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
SUSE CVE-2013-2110
Heap-based buffer overflow in the phpquotprintencode function in ext/standard/quotprint.c in PHP before 5.3.26 and 5.4.x before 5.4.16 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted argument to the quotedprintableenco...
CVE-2020-23065
Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attacker to execute arbitrary code via the video-js.swf...