857 matches found
CVE-2023-48952
An issue in the boxdeserializereusing function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...
CVE-2023-48945
A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-48947: Undefined Security Weakness
An issue in the chacmp function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...
CVE-2023-48946
CVE-2023-48946 concerns openlink Virtuoso Open-Source Edition (v7.2.11). The issue is in the box_mpy function and can cause a Denial of Service after executing a SELECT statement. The connected documents consistently reference a DoS impact tied to this component/version, with no publicly provided...
CVE-2023-48948
CVE-2023-48948 affects openlink virtuoso-opensource v7.2.11. The vulnerability is in the box_div function and can cause a Denial of Service after executing a SELECT statement. The connected sources provide concrete details (affected product and function) and note the impact as DoS with a network ...
PT-2023-31016 · Openlink +1 · Openlink Virtuoso-Opensource +1
Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.11 Description: The issue in the box div function allows attackers to cause a Denial of Service DoS after running a SELECT statement. Recommendations: For openlink virtuoso-opensource version 7.2.11,...
CVE-2023-48949: Undefined Security Weakness
An issue in the boxadd function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...
CVE-2023-48952
An issue in the boxdeserializereusing function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...
PT-2023-8879 · Unknown +4 · Virtuoso-Opensource +4
Name of the Vulnerable Software and Affected Versions: virtuoso-opensource version 7.2.11 Description: The issue is related to the box equal function in virtuoso-opensource, which can be exploited by attackers to cause a Denial of Service DoS after running a SELECT statement. The vulnerability is...
PT-2023-8880 · Openlink +4 · Virtuoso-Opensource +4
Name of the Vulnerable Software and Affected Versions: virtuoso-opensource version 7.2.11 Description: The issue is related to insufficient input processing in the box col len function, which can be exploited by a remote attacker to cause a Denial of Service DoS after running a SELECT statement...
CVE-2023-48948
An issue in the boxdiv function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...
CVE-2023-48945: Out-of-bounds Write
A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
A Bootiful Podcast: iText Creator Bruno Lowagie
Hi, Spring fans! We're releasing Spring Boot 3.2 today! And it's Thanksgiving in the USA Happy Thanksgiving!. So, we wanted to celebrate with an amazing episode, and so today's guest is opensource legend Bruno Lowagie. Enjoy!...
PT-2023-9516 · Openlink +4 · Virtuoso-Opensource +4
Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.11 Description: The issue is related to the incorrect implementation of the sequence of actions in the cha cmp component of the Virtuoso-opensource web application development platform. Exploitation of...
EmploLeaks - Finding Leaked Employees Info for the Win
Developed by Faraday security researchers, this cutting-edge tool utilizes the power of OpenSource Intelligence techniques. EmploLeaks extracts valuable insights by scouring various platforms, to compile a comprehensive list of employees associated with a given company and cross-reference these...
CVE-2023-37461
CVE-2023-37461 affects Metersphere. The vulnerability arises from uploaded files that may set a related type to a relative path such as ../../../../, enabling a path-traversal that could overwrite or create files within the metersphere process’ accessible filesystem. This is constrained to files ...
CVE-2023-31631
An issue in the sqlopredscontradiction component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-31630
An issue in the sqloqueryspec component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...