Denial of service

TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cstemodules/system which can reboot the system...

CVE-2023-34669: Observable Discrepancy

TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cstemodules/system which can reboot the system...

CVE-2023-34669

TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cstemodules/system which can reboot the system...

GO-2023-1733 Timing attack from non-constant time scalar arithmetic in github.com/bnb-chain/tss-lib

Timing attack from non-constant time scalar arithmetic in github.com/bnb-chain/tss-lib...

GO-2023-1867 Replay attacks involving proofs in github.com/bnb-chain/tss-lib

Replay attacks involving proofs in github.com/bnb-chain/tss-lib...

CVE-2023-37766

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfisomremoveuserdata function at /lib/libgpac.so...

Security Bulletin: IBM Match 360 is vulnerable to Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes (CVE-2020-14422)

Summary Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or...

CVE-2023-35165

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages "aws-cdk-lib" 2.0.0 until 2.80.0 and "@aws-cdk/aws-eks" 1.57.0 until 1.202.0, "eks.Cluster" and "eks.FargateCluste...

CVE-2023-35165: Incorrect Authorization

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages aws-cdk-lib 2.0.0 until 2.80.0 and @aws-cdk/aws-eks 1.57.0 until 1.202.0, eks.Cluster and eks.FargateCluster...

urlnorm 安全漏洞

urlnorm is a URL normalization library for Rust open sourced by progscrape. A security vulnerability exists in urlnorm version 0.1.4 and earlier, which stems from a vulnerability that allows a regular expression denial of service ReDos via a crafted lib.rs URL...

@alliander-opensource/aws-jwt-sts (0.2.6), @almaclaine/cdk (>=0.0.3, <=0.0.19) +195 more potentially affected by CVE-2023-35165 via aws-cdk-lib (>=2.0.0, <=2.79.1)

aws-cdk-lib NPM version =2.0.0, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =5.0.0-beta.0, =3.0.0-ampgenconfig.0, =3.5.0-beta.0, =5.0.0-beta.0, =2.24.0-beta.0, =5.0.0-beta.0, =4.0.0-cdkv2.0, =5.3.3 and...

@alliander-opensource/aws-jwt-sts (0.2.6), @almaclaine/cdk (>=0.0.3, <=0.0.19) +195 more potentially affected by CVE-2023-35165 via aws-cdk-lib (>=2.0.0, <=2.79.1)

aws-cdk-lib NPM version =2.0.0, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =5.0.0-beta.0, =3.0.0-ampgenconfig.0, =3.5.0-beta.0, =5.0.0-beta.0, =2.24.0-beta.0, =5.0.0-beta.0, =4.0.0-cdkv2.0, =5.3.3 and...

CVE-2023-34880

cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the addaction method at lib/admin/languageadmin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion...

CVE-2023-34880

CVE-2023-34880 affects CmsEasy CMS v7.7.7.7 (20230520) and is caused by a path traversal vulnerability in the add_action method of lib/admin/language_admin.php. The issue allows an attacker to execute arbitrary code and perform local file inclusion (LFI). Documents indicate high-severity impact (...

CVE-2023-34880: Improper Limitation of a Pathname to a Restricted Directory

cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the addaction method at lib/admin/languageadmin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion...

CVE-2023-34880

cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the addaction method at lib/admin/languageadmin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion...

utlib.ut.ee Cross Site Scripting vulnerability OBB-3381188

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-34256: Out-of-bounds Read

An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4groupdesccsum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend again...

K000134818: Python XML RPC vulnerability CVE-2019-16935

Security Advisory Description The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the servertitle field. This occurs in Lib/DocXMLRPCServer. py in Python 2.x, and in Lib/xmlrpc/server. py in Python 3.x. If setservertitle is called with...

jwt-verify-lib:jwt_verify_lib_fuzz_test: Use-of-uninitialized-value in bn_cmp_words_consttime

Detailed Report: https://oss-fuzz.com/testcase?key=4906972068315136 Project: jwt-verify-lib Fuzzing Engine: libFuzzer Fuzz Target: jwtverifylibfuzztest Job Type: libfuzzermsanjwt-verify-lib Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bncmpwordsconsttime...