5594 matches found
SUSE CVE-2021-20221
An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to...
AZL-44844 CVE-2023-25567 affecting package gssntlmssp for versions less than 1.3.1-1
GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the avpair is not checked properly for two of the elements which can trigger an out-of-bound read. The...
GSS-NTLMSSP 缓冲区错误漏洞
GSS-NTLMSSP is gssapi open source a mechglue plugin that implements the NTLM authentication GSSAPI library . GSS-NTLMSSP version 1.2.0 before the buffer error vulnerability , the vulnerability stems from the length of the two elements avpair may trigger an out-of-bounds read is not properly check...
GSS-NTLMSSP 缓冲区错误漏洞
GSS-NTLMSSP is gssapi open source mechglue plugin that implements the NTLM authentication GSSAPI library . GSS-NTLMSSP version 1.2.0 before the buffer error vulnerability , the vulnerability stems from the application allows a length greater than 4GB of the token , an attacker can use the...
Cross site scripting
Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0410
CVE-2023-0410 affects builder.io/qwik prior to 0.1.0-beta5. The vulnerability is a Cross-site Scripting (XSS) issue caused by improper sanitization in render-ssr.ts, enabling injection and execution of arbitrary JavaScript. Multiple sources (NVD/Red Hat/OSV/Veracode/GHSA) confirm the same vector ...
AZL-12995 CVE-2022-3437 affecting package samba 4.12.5-7
A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a...
Malicious code in generic-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f87fcdafcf972ad5460dfd5d8fca046c5d3c1545f8725f7dc18174de69c362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-472 Malicious code in generic-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f87fcdafcf972ad5460dfd5d8fca046c5d3c1545f8725f7dc18174de69c362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-49725
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's IIO subsystem, specifically within the ina2xx driver, related to a NULL pointer dereference during device tree matching. This occurs when the device...
D-Link DIR-825/EE xupnpd Generic Plugin Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Generic plugin for the xupnpd service, which listens on TCP port...
X.Org X Server 缓冲区错误漏洞
X.Org X Server is an X Window System display server from the X.org Foundation. X.Org X Server suffers from a buffer error vulnerability that originates when an attacker sends GenericEvents greater than 32 bytes in length via an XTestFakeInput request, the exchange handler for the XTestFakeInput...
PT-2022-17468 · Qualcomm · Qualcomm Snapdragon
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in the MODEM due to improper validation of array indices while processing GSTK Proactive commands. This affects various Qualcomm...
PT-2022-36433 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: A potential issue exists in the Linux Kernel, specifically related to the gso Generic Segmentation Offload functionality, where a panic can occur when dealing with a frag list that contains...
Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2022-333-01)
The version of kernel-generic installed on the remote host is prior to 5.15.80 / 5.15.80smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-333-01 advisory. New kernel packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the...
Jenkins Generic Webhook Trigger Plugin External Entity Injection (CVE-2021-21669)
An XXE vulnerability exists in Jenkins Generic Webhook Trigger Plugin. The vulnerability is due to insufficient validation of input parameters. Successful exploitation could lead to the disclosure of file contents for any file readable by Jenkins...
CVE-2022-44784
An issue was discovered in Appalti & Contratti 9.12.2. The target web applications LFS and DL229 expose a set of services provided by the Axis 1.4 instance, embedded directly into the applications, as hinted by the WEB-INF/web.xml file leaked through Local File Inclusion. Among the exposed...
Default configuration
An issue was discovered in Appalti & Contratti 9.12.2. The target web applications LFS and DL229 expose a set of services provided by the Axis 1.4 instance, embedded directly into the applications, as hinted by the WEB-INF/web.xml file leaked through Local File Inclusion. Among the exposed...
