13524 matches found
SUSE CVE-2023-29543
An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...
OSV-2024-1203 Global-buffer-overflow in AnnouncePunctuation
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372298920 Crash type: Global-buffer-overflow WRITE Crash state: AnnouncePunctuation ReadClause TranslateClause...
PT-2024-40602
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a crash type identified as Global-buffer-overflow WRITE. The crash state includes AnnouncePunctuation, ReadClause, and...
CVE-2024-47816 Users can impersonate import requesters if their actor IDs coincide in ImportDump
ImportDump is a mediawiki extension designed to automate user import requests. A user's local actor ID is stored in the database to tell who made what requests. Therefore, if a user on another wiki happens to have the same actor ID as someone on the central wiki, the user on the other wiki can ac...
CVE-2024-47812 Cross-site Scripting (XSS) on Special:RequestImportQueue when displaying request date in ImportDump
ImportDump is an extension for mediawiki designed to automate user import requests. Anyone who can edit the interface strings of a wiki typically administrators and interface admins can embed XSS payloads in the messages for dates, and thus XSS anyone who views Special:RequestImportQueue. This...
Google Joins Forces with GASA and DNS RF to Tackle Online Scams at Scale
Google on Wednesday announced a new partnership with the Global Anti-Scam Alliance GASA and DNS Research Federation DNS RF to combat online scams. The initiative, which has been codenamed the Global Signal Exchange GSE, is designed to create real-time insights into scams, fraud, and other forms o...
espeak-ng:ssml-fuzzer: Global-buffer-overflow in AnnouncePunctuation
Detailed Report: https://oss-fuzz.com/testcase?key=4897820148039680 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Global-buffer-overflow WRITE Crash Address: 0x000001149a08 Crash State: AnnouncePunctuation...
GitLab Global Search Disclosure
The vulnerability of the Git-based software platform’s implementation of the Global Search technology for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose...
CVE-2024-47951
In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings...
CVE-2024-47951
In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings...
CVE-2024-47951
CVE-2024-47951 corresponds to a stored XSS issue in JetBrains TeamCity that affects versions prior to 2024.07.3, exploited via the server’s global settings. Multiple sources in the connected data confirm this vulnerability, including Red Hat and CNVD entries, which describe the same root cause an...
SAP HANA Node.js client package vulnerable to Prototype Pollution
The SAP HANA Node.js client package versions from 2.0.0 before 2.21.31 is impacted by Prototype Pollution vulnerability allowing an attacker to add arbitrary properties to global object prototypes. This is due to improper user input sanitation when using the nestTables feature causing low impact ...
CVE-2024-45277 Prototype Pollution vulnerability in SAP HANA Client
The SAP HANA Node.js client package versions from 2.0.0 before 2.21.31 is impacted by Prototype Pollution vulnerability allowing an attacker to add arbitrary properties to global object prototypes. This is due to improper user input sanitation when using the nestTables feature causing low impact ...
Siemens Simcenter Nastran
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2024-47951: Improper Neutralization of Input During Web Page Generation
In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings...
JetBrains TeamCity cross-site scripting vulnerabilities
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...
Check Point Response to CVE-2024-24914 - TCL substitution of global parameter values
Symptoms - After logging in to Gaia Portal, authenticated users local Gaia users and RADIUS / TACACS users may cause code injection in Gaia Portal because of unprotected global variables usage when processing the HTTP request in the TCL process. This issue received the ID CVE-2024-24914. Solution...
Leveling Up Security: Understanding Cyber Threats in the Gaming Industry
Introduction As the G2E Global Gaming Expo conference kicks off in Las Vegas, it's important to highlight the significant role cybersecurity plays in the rapidly evolving gaming industry. From online casinos to eSports, gaming has grown into a massive global enterprise, making it a prime target f...
