CVE-2024-45753

In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribute...

PT-2025-6755 · Arcadyan · Arcadyan Livebox Fibra Prv3399B B Lt

Name of the Vulnerable Software and Affected Versions: Arcadyan Livebox Fibra PRV3399B B LT affected versions not specified Description: The issue allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the...

CVE-2024-1049: Improper Neutralization of Input During Web Page Generation

The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Widget's in all versions up to, and including, 3.1.6 due to insufficient input sanitization and output escaping on the link value. This makes it possible for...

CVE-2019-9675

Removed by vendor...

CVE-2019-9675

An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phartarwriteheadersint in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue...

CVE-2019-9675: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phartarwriteheadersint in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue...