UBUNTU-CVE-2022-3784

A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34. Affected by this vulnerability is the function AP4Mp4AudioDsiParser::ReadBits of the file Ap4Mp4AudioInfo.cpp of the component mp4hls. The manipulation leads to heap-based buffer overflow. The attack can be launched...

PT-2022-25501 · Ragic · Ragic

Name of the Vulnerable Software and Affected Versions: Ragic affected versions not specified Description: The issue concerns insufficient filtering for special characters on the report generation page, allowing a remote attacker with general user privileges to inject JavaScript and perform a...

Bento4 buffer error vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 5e7bb34, which stems from an affected AP4Mp4AudioDsiParser::ReadBits function in the Ap4Mp4AudioInfo.cpp file in the component mp4hls, which may result in a heap-based buffer...

Debian dla-3171 : distro-info-data - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3171 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3171-1 [email protected] https://www.debian.org/lts/security/...

PT-2022-36723 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state involves several functions, including expert set info vformat, expert add info...

CVE-2021-38730

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntInfo.php...

SEMCMS SQL Injection Vulnerability

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which stems from a SQL injection issue in AntInfo.php...

PT-2022-26787 · Unknown · Rukovoditel

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A stored cross-site scripting XSS issue in the Dashboard Configuration feature, specifically at the "index.php?module=dashboard configure/index" endpoint, allows authenticated attackers to execute...

Information disclosure

Yordam Library Information Document Automation product before version 19.02 has an unauthenticated Information disclosure vulnerability...

CVE-2021-45476

CVE-2021-45476 affects the Yordam Library Information Document Automation product, prior to version 19.02, with an unauthenticated reflected XSS vulnerability. The issue is caused by a reflected cross-site scripting flaw that does not require authentication. Impact is described as vulnerability i...

PT-2022-26066 · Delta Electronics · Infrasuite Device Master

Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior Description: The issue allows unauthenticated users to trigger the WriteConfiguration method. This could enable an attacker to modify user configuration files, such as...

PT-2022-7121

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A flaw was found in GLib where GVariant deserialization is vulnerable to a slowdown issue. A crafted GVariant can cause excessive processing, leading to denial of service. The issue is related t...

Tenda AX1803 Buffer Error Vulnerability

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A security vulnerability exists in the Tenda AX1803 v1.0.0.1, which originates from a heap overflow in the GetParentControlInfo function...

Exploit for OS Command Injection in Newspaperclub Pdf_Info

CVE-2022-36231 The ruby gem pdfinfohttps://rubygems.org/g...

CVE-2022-35876

Four format-string injection vulnerabilities exist in Abode Systems, Inc. iota All-In-One Security Kit (firmware 6.9X/6.9Z) within the XCMD testWifiAP path. The root cause is usage of attacker-controlled configuration values (default_key_id and key) in log/command construction for Wi‑Fi setup, en...

guide2.info Cross Site Scripting vulnerability OBB-3012477

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

DEBIAN-CVE-2022-43044

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gfisomgetmetaiteminfo at /isomedia/meta.c...

Design/Logic Flaw

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gfisomgetmetaiteminfo at /isomedia/meta.c...

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.

...

GPAC security vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.1-DEV-rev368-gfd054169b-master, which stems from the gfisomgetmetaiteminfo function in /isomedia/meta.c that was found to contain a segmentation violation...