1833 matches found
intra-handshake-fail
Intra-handshake fail This is the working area for the individual Internet-Draft, "Intra-handshake fail". Editor's Copy Datatracker Page Individual Draft Compare Editor's Copy to Individual Draft Contributing See the guidelines for contributions. The contributing file also has tips on how to make...
CVE-2023-5649
Brocade ASCG versions prior to v3.0 are vulnerable to an Improper Input Validation flaw (CVE-2023-5649) involving registered case credentials. A local authenticated user can provide invalid inputs, such as special characters, during the collection of "supportsave" from a Brocade Switch . This vul...
CVE-2023-37366
CVE-2023-37366 is a remote denial-of-service vulnerability in Samsung Exynos mobile, automotive, and modem processors (including Exynos 9810 through 2200, Modem 5123/5300, and Auto T5123). The root cause is in cd_parseMsg (file cd_codec.c) within the Shannon SM Task, where improper input validati...
CVE-2023-24283
Portable Puzzle Collection (sgt-puzzles) versions before 20230116.5782e29 contain a buffer overflow in the Guess puzzle component, triggered by a crafted save file, leading to a Denial of Service . The CVSS 3.1 score is 2.9 (Low) , with a local attack vector and high complexity. An upstream fix i...
CVE-2023-24288
Simon Tatham's Portable Puzzle Collection (sgt-puzzles) is vulnerable to a buffer overrun triggered by a crafted save file, which can lead to Denial of Service . The vulnerability affects versions before 20230116.5782e29 . The CVSS 3.1 score is 2.9 (LOW) , with a local attack vector, high complex...
CVE-2023-24291
Simon Tatham's Portable Puzzle Collection (sgt-puzzles) before version 20230116.5782e29 contains a buffer overflow (also described as an integer overflow) triggered via the record length parameter in a crafted save file. The vulnerability can lead to a buffer overrun in the application, with a lo...
CVE-2023-34854
HotelDruid before 3.0.6 is affected by insufficient file upload sanitation in the backup/restore function, enabling authenticated remote code execution (RCE) . The vulnerability requires high privileges and is network-based with high attack complexity, yielding a CVSS 3.1 score of 6.6 (MEDIUM) . ...
CVE-2023-24287
Portable Puzzle Collection (sgt-puzzles) versions before 20230116.5782e29 contain a buffer overflow in the Undead puzzle , triggerable via the "M" command when loading a crafted save file. The vulnerability results in a low availability impact (CVSS 3.1 base score 2.9 , local attack vector with h...
WordPress SOGO Add Script to Individual Pages Header Footer plugin <= 3.9 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Chamseddine Bouzaiene in WordPress Plugin SOGO Add Script to Individual Pages Header Footer versions = 3.9...
CVE-2026-14835: Improper Neutralization of Input During Web Page Generation
The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfilteredhtml capability, allowing users with contributor-level access a...
CVE-2026-17059
A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of...
CVE-2026-13225
Malicious HTML content could be injected into the email address of an order, which pretix showed without sanitization on the confirmation page for individual tickets in that order...
EUVD-2026-39418
Malicious HTML content could be injected into the email address of an order, which pretix showed without sanitization on the confirmation page for individual tickets in that order...
CVE-2026-13225
The provided connected documents confirm CVE-2026-13225 as a Stored XSS in pretix. Malicious HTML content could be injected into the email address field of an order; pretix displays this on the confirmation page for individual tickets without sanitization. Affects pretix’s order confirmation page...
CVE-2020-9695
CVE-2020-9695 is an out-of-bounds write vulnerability in Adobe Acrobat/Reader. Affects multiple releases (e.g., Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier) and related Acrobat products. Root cause: out-of-bounds write in the affected code pa...
CVE-2020-9711
CVE-2020-9711 describes an out-of-bounds read (CWE-125) in Adobe Acrobat/Reader. Affected products include multiple lines of Acrobat/Reader: DC Continuous and Classic channels, across 2015, 2017, 2020 release families (e.g., 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earli...
CVE-2020-9713
CVE-2020-9713 is an out-of-bounds read (CWE-125) in Adobe Acrobat and Reader. Affected are versions including 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier. The vulnerability could disclose sensitive memory and requires user interaction (vi...
CVE-2024-35690
CVE-2024-35690 – WordPress Widget Options plugin up to version 4.0.1 is vulnerable to sensitive data exposure (Subscriber+). The Patchstack entries (and WPVulnDB reference) indicate vulnerable versions are