Horner Automation Cscape Buffer Error Vulnerability

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A security vulnerability exists in Horner Automation Cscape 9.90 SP10 and prior versions, which stems from the presence of a buffer overflow vulnerability...

CVE-2024-20807

Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information...

Integer Overflow or Wraparound

Overview vapor/vapor is an a server-side Swift HTTP web framework. Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the vaporurlparserparse function. An attacker can spoof the host by padding the port number with zeros, causing an integer overflow when the URL...

CVE-2022-4957

creationtimestamp| type| source ---|---|--- 2023-12-22 09:22:15+00:00| seen| https://t.me/ctinow/158263...

Bosch IP cameras security breach

Bosch IP cameras are network cameras from Bosch, Germany. A security vulnerability exists in Bosch IP cameras that could allow a user with administrative privileges to run arbitrary commands on the camera's operating system. The following products and versions are affected: Bosch Camera CPP13...

UBUNTU-CVE-2023-46345

Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c...

PT-2023-30943 · Inure · Inure

Name of the Vulnerable Software and Affected Versions: inure versions prior to build92 Description: The issue concerns exposure of sensitive information to an unauthorized actor in the GitHub repository hamza417/inure. Recommendations: For versions prior to build92, update to build92 or later to...

PT-2023-12135 · Unknown +3 · Libjpeg-Turbo +3

Name of the Vulnerable Software and Affected Versions: libjpeg-turbo version 2.0.90 Description: The issue is a heap-based buffer over-read in the decompress smooth data function in jdcoefct.c. This is a critical issue. Recommendations: For libjpeg-turbo version 2.0.90, consider updating to a new...

Intel Server Board 安全漏洞

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in Intel Server Board BMC firmware versions prior to 2.90, which originates from incorrect input validation. An attacker could exploit the vulnerability to cause information disclosure...

Intel Server Board 资源管理错误漏洞

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in Intel Server Board versions prior to 2.90, which originates from a double memory release. An attacker exploited the vulnerability to cause information disclosure...

PT-2023-16315 · WordPress · The Free Woocommerce Theme 99Fy Extension

Name of the Vulnerable Software and Affected Versions: The Free WooCommerce Theme 99fy Extension WordPress plugin versions prior to 1.2.8 Description: The issue concerns a lack of CSRF check when activating plugins, which could allow attackers to make logged-in admins activate arbitrary plugins...

PT-2023-35427 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.95 Description: The issue is related to a null-deref in the mremap function after a fork operation. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

SUSE CVE-2013-1091

Stack-based buffer overflow in Novell iPrint Client before 5.90 allows remote attackers to execute arbitrary code via unspecified vectors...

SUSE CVE-2018-21008

An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsimac80211detach in the file drivers/net/wireless/rsi/rsi91xmac80211.c...

SUSE CVE-2019-15846

Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash...

SUSE CVE-2021-21221

Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

SUSE CVE-2021-29959

When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website from re-enabling it without an additional prompt. This was only possible if the website kept recording with the microphone until re-enabling the camera. This...

SUSE CVE-2021-29971

If a user had granted a permission to a webpage and saved that grant, any webpage running on the same host - irrespective of scheme or port - would be granted that permission. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 90...

SUSE CVE-2021-29972

A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may have remediated other, unknown security vulnerabilities as well. This vulnerability affects Firefox 90...

SUSE CVE-2021-29974

When network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings, a TLS error page would allow the user to override an error on a domain which had specified HTTP Strict Transport Security which implies that the error should not be override-able. This issue did not...