UBUNTU-CVE-2023-34824

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in cafinfo function in cafreader.c...

PT-2023-24951 · Jmarsden · Jsonij

Name of the Vulnerable Software and Affected Versions: jmarsden/jsonij versions 0.5.2 and earlier Description: The issue allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. Recommendations: For versions 0.5.2 and earlier,...

fdkaac buffer error vulnerability

fdkaac is a command-line front-end for the libfdk-aac encoder by the Japanese individual developer nu774. A security vulnerability exists in versions of fdkaac prior to 1.0.5, which stems from the discovery of a heap buffer overflow vulnerability via the cafinfo function in cafreader.c. The...

huren24.info Cross Site Scripting vulnerability OBB-3423938

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

guide2.info Cross Site Scripting vulnerability OBB-3423343

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-33695

CVE-2023-33695 affects Hutool Core v5.8.17 and earlier, where FileUtil.createTempFile() stores the temporary file with insecure default permissions, enabling information disclosure. Multiple sources (NVD, Red Hat, GHSA, OSV, Veracode, CNNVD) confirm the vulnerability in /core/io/FileUtil.java. No...

Zyxel Router Detection - Get Basic Information

Binary data zyxelrouterdetectgetbasicinfo.nbin...

PT-2023-23326 · Systemd +1 · Systemd +1

Name of the Vulnerable Software and Affected Versions: systemd version 253 Description: An issue was discovered where an attacker can truncate a sealed log file and then resume log sealing, allowing modifications to go undetected despite integrity checks showing no error. Recommendations: For...

wcl1971.info Cross Site Scripting vulnerability OBB-3420759

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-43778

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

Design/Logic Flaw

Atlas Copco Power Focus 6000 web server does not sanitize the login information stored by the authenticated user’s browser, which could allow an attacker with access to the user’s computer to gain credential information of the controller...

CVE-2022-27539

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

Information disclosure

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

CVE-2022-43778

CVE-2022-43778 describes TOCTOU vulnerabilities in HP BIOS firmware for certain HP PC products that may permit arbitrary code execution, denial of service, and information disclosure. The root cause is a TOCTOU issue in the BIOS timing checks. Impact is high (local attacker, high confidentiality/...

Design/Logic Flaw

AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, or data tampering...

PT-2023-23667 · Milesight · Milesight Ncr/Camera

Name of the Vulnerable Software and Affected Versions: Milesight NCR/camera version 71.8.0.6-r5 Description: The issue allows authentication bypass through an unspecified method. Recommendations: For Milesight NCR/camera version 71.8.0.6-r5, at the moment, there is no information about a newer...

spravka48.info Cross Site Scripting vulnerability OBB-3411365

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-2085

The CVE-2023-2085 entry concerns the WordPress plugin Essential Blocks (versions up to and including 4.0.6). The vulnerability arises from a missing capability check in the templates function, enabling unauthorized information exposure to subscriber-level users. Although a nonce check exists, it ...

CVE-2023-34566

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo...

CVE-2023-2541

CVE-2023-2541 affects the KNIME Business Hub Web Frontend prior to 1.4.0. The issue allows an unauthenticated remote attacker to access internal application details such as version numbers, host names, and IP addresses. No personal information or application data is exposed. Root cause and exact ...