7630 matches found
CVE-2023-6313
A vulnerability was found in SourceCodester URL Shortener 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Long URL Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has be...
CVE-2023-6313
SourceCodester URL Shortener 1.0 is affected, specifically the Long URL Handler component. The root cause involves manipulation of the Long URL Handler that enables cross-site scripting (XSS) when handling URL inputs. The vulnerability can be exploited remotely, and public exploitation details ar...
CVE-2023-6313 SourceCodester URL Shortener Long URL cross site scripting
A vulnerability was found in SourceCodester URL Shortener 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Long URL Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has be...
CVE-2023-6313 SourceCodester URL Shortener Long URL cross site scripting
A vulnerability was found in SourceCodester URL Shortener 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Long URL Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has be...
PT-2023-32613 · Sourcecodester · Sourcecodester Url Shortener
Name of the Vulnerable Software and Affected Versions: SourceCodester URL Shortener version 1.0 Description: A vulnerability was found in the Long URL Handler component, which can be exploited to lead to cross site scripting. The attack can be launched remotely. Recommendations: For SourceCodeste...
PT-2023-29754 · Frhed · Frhed
Name of the Vulnerable Software and Affected Versions: Frhed hex editor version 1.6.0 Description: The issue is a buffer overflow vulnerability that could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler SEH registers...
WordPress Simple Long Form Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)
Software Simple Long Form Type Plugin Vulnerable versions = 2.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-41136 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f92f4ede21be Credits DoYeon Park p6rkdoye0n Required privile...
Frhed Buffer Error Vulnerability
Frhed is a binary file editor hex editor for Windows from the datadiode personal developer. A buffer error vulnerability exists in Frhed version 1.6.0 that originates from allowing an attacker to execute arbitrary code via the long filename parameter via the Structured Exception Handler SEH...
Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to HTTP header injection due to [CVE-2023-29406]
Summary Golang Go is used by IBM App Connect Enterprise Certified Container in the operator catalog, the operator and its operands. The IBM App Connect Enterprise Certified Container operator and the IntegrationServer & IntegrationRuntime operands are vulnerable to HTTP header injection leading t...
SUSE CVE-2023-48232
Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues o...
SUSE-SU-2023:4489-1 Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service bsc1216922...
CVE-2023-46402
A flaw was found in the git-urls package. This issue occurs when a long input is provided inside the directory path of the git url. This could lead to loading delays or a regular expression denial of service...
There is no LTSR version of WEM
This article describes whether there is Long Term Service Release LTSR version of Workspace Environment Management WEM...
CVE-2023-48235
Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...
CVE-2023-48233
Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...
CVE-2023-48233
Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...
UBUNTU-CVE-2023-48233
Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...
Vim Security Vulnerabilities
Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim v9.0.2107, which stems from a floating point exception that may occur when calculating line offsets for extra-long lines and enabling smooth scrolling and the cpo setting contains the n flag...
Vim Input Validation Error Vulnerability
Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2108, which stems from the fact that the program may abort if the count after the s command is greater than the count of a long integer variable...