3771 matches found
Max Secure Anti Virus Plus Security Vulnerabilities
Max Secure Anti Virus Plus is a suite of antivirus software from Max Secure India. A security vulnerability exists in Max Secure Anti Virus Plus version 19.0.2.1, which originates in the MaxProc64.sys library of the IoControlCode Handler module and may result in a denial of service...
Max Secure Anti Virus Plus Security Vulnerabilities
Max Secure Anti Virus Plus is a suite of antivirus software from Max Secure India. A security vulnerability exists in Max Secure Anti Virus Plus version 19.0.2.1, which originates in the MaxProctetor64.sys library of the IoControlCode Handler module and may result in a denial of service...
Max Secure Anti Virus Plus Access Control Vulnerability
Max Secure Anti Virus Plus is a suite of antivirus software from Max Secure India. An access control error vulnerability exists in Max Secure Anti Virus Plus version 19.0.2.1, which originates in the MaxCryptMon.sys library of the IoControlCode Handler module and could result in a denial of servi...
CVE-2023-1493: Improper Resource Shutdown or Release
A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been rated as problematic. This issue affects the function 0x220019 in the library MaxProctetor64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack o...
CVE-2023-1491: Improper Access Control
A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects the function 0x220020 in the library MaxCryptMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach...
WordPress Min and Max Quantity for WooCommerce Plugin <= 1.3.2.6 is vulnerable to Broken Access Control
Software Min and Max Quantity for WooCommerce Type Plugin Vulnerable versions = 1.3.2.6 Fixed in 1.3.2.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-45813 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID d01f544d9c9e Credits Istv...
PT-2025-18876
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the max subslices array-index-out-of-bounds access Description A potential out-of-bounds access issue has been identified in the Linux kernel, specifically in the drm/i915/sseu...
OESA-2023-1155 apache-commons-fileupload security update
The javax.servlet package lacks support for RFC-1867, HTML file upload. This package provides a simple to use API for working with such data. The scope of this package is to create a package of Java utility classes to read multipart/form-data within a javax.servlet.http.HttpServletRequest. Securi...
CVE-2023-27483 fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime
crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. An out of memory panic vulnerability has been discovered in affected versions. Applications that use the Paved type's SetValue method with user provided input without proper...
Exploit for Improper Initialization in Linux Linux_Kernel
!Dirty Pipehttps://forum.hackersploit.org/uploads/default/ori...
K06542333: Multiple Intel FPGA vulnerabilities CVE-2019-14625, CVE-2019-14626, and CVE-2020-0574
Security Advisory Description CVE-2019-14625 Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable denial of service via local access. CVE-2019-14626 Improper access control in PCIe...
DEBIAN-CVE-2022-31394
Hyperium Hyper before 0.14.19 does not allow for customization of the maxheaderlistsize method in the H2 third-party software, allowing attackers to perform HTTP2 attacks...
AZL-13685 CVE-2022-31394 affecting package rpm-ostree for versions less than 2022.1-4
Hyperium Hyper before 0.14.19 does not allow for customization of the maxheaderlistsize method in the H2 third-party software, allowing attackers to perform HTTP2 attacks...
UBUNTU-CVE-2022-31394
Hyperium Hyper before 0.14.19 does not allow for customization of the maxheaderlistsize method in the H2 third-party software, allowing attackers to perform HTTP2 attacks...
PT-2023-8461
Name of the Vulnerable Software and Affected Versions Hyper versions prior to 0.14.19 Description The issue is related to the HTTP library for Rust Hyper, which is associated with unbounded resource allocation. This can be exploited by a remote attacker to cause a denial of service. The...
GHSA-HFRX-6QGJ-FP6C Apache Commons FileUpload denial of service vulnerability
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option...
DEBIAN-CVE-2023-24998
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option...
UBUNTU-CVE-2023-24998
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option...
