CVE-2024-0962 obgm libcoap Configuration File coap_oscore.c get_split_entry stack-based overflow

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function getsplitentry of the file src/coaposcore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely...

PT-2024-13313 · Mesa +1 · Mesa +1

Name of the Vulnerable Software and Affected Versions: Mesa version 23.0.4 Description: A NULL pointer dereference was discovered in the check xshm function for the has error state. It is noted that this issue is disputed because there is no demonstrated scenario in which the vulnerability can be...

PT-2024-20145 · Cups Easy · Cups Easy

Name of the Vulnerable Software and Affected Versions: Cups Easy Purchase & Inventory version 1.0 Description: A Cross-Site Scripting XSS issue has been reported, where user-controlled inputs are not sufficiently encoded. This issue can be exploited via the /cupseasylive/taxstructurecreate.php...

PT-2024-1429 · Unknown · Solar Ftp Server

Name of the Vulnerable Software and Affected Versions: Solar FTP Server versions 2.1.1 through 2.1.2 Description: The issue is related to an uncontrolled resource consumption in the PASV mode of the Solar FTP Server, which can be exploited by a remote attacker to cause a denial of service. The...

PT-2024-19396 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 6.5.7.4 Shopware versions 6.1, 6.2, 6.3, and 6.4 Description: The Shopware application API contains a search functionality that enables users to search through information stored within their Shopware instance. The...

PT-2024-12147 · Easyxdm · Easyxdm

Name of the Vulnerable Software and Affected Versions: easyXDM version 2.5 Description: The issue allows for cross-site scripting XSS attacks via the xdm e parameter. This means an attacker could potentially inject malicious scripts into a website, affecting users who visit the site...

CVE-2024-0263

A vulnerability was found in ACME Ultra Mini HTTPd 1.21. It has been classified as problematic. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

Design/Logic Flaw

A vulnerability was found in ACME Ultra Mini HTTPd 1.21. It has been classified as problematic. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

SUSE CVE-2023-7104

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...

AZL-32297 CVE-2023-7104 affecting package sqlite for versions less than 3.39.2-3

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...

DEBIAN-CVE-2023-7104

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...

UBUNTU-CVE-2023-7104

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...

PT-2023-10176 · Unknown · W3C Online-Spellchecker-Py

Name of the Vulnerable Software and Affected Versions: w3c online-spellchecker-py up to 20140130 Description: A vulnerability was found in the processing of the file spellchecker, leading to cross site scripting. The attack may be initiated remotely, with a rather high complexity and difficult...

PT-2023-31402 · Ibm · Ibm System Storage Virtualization Engine Ts7700

Name of the Vulnerable Software and Affected Versions: IBM System Storage Virtualization Engine TS7700 versions 3957-VEC, 3948-VED Description: The issue allows a remote authenticated user to obtain sensitive information due to improper filtering of URLs. By submitting a specially crafted HTTP GE...

PT-2023-31545 · Unknown · Izybat Orange Casiers

Name of the Vulnerable Software and Affected Versions: IzyBat Orange casiers before 20230803 1 Description: The issue allows SQL injection in the getEnsemble.php ensemble. Recommendations: For IzyBat Orange casiers before 20230803 1, update to a version 20230803 1 or later to resolve the issue. A...

PT-2023-9316 · Oracle · Oracle Enterprise Asset Management

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Asset Management versions 12.2.11 through 12.2.13 Description: The issue is related to insufficient input validation in the Work Definition Issues component of Oracle Enterprise Asset Management. This allows a low-privileged...

PT-2023-7287 · Unknown · Weston Embedded Uc-Http

Name of the Vulnerable Software and Affected Versions: Weston Embedded uC-HTTP version 3.01.01 Description: A heap-based buffer overflow vulnerability exists in the HTTP Server functionality. This issue can be triggered by a specially crafted set of network packets, potentially leading to arbitra...

CVE-2023-5793 flusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross site scripting

A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblockplace leads to cross site scripting. The attack may be...

PT-2023-32331

Name of the Vulnerable Software and Affected Versions flusity CMS affected versions not specified Description A vulnerability was found in flusity CMS, classified as problematic, affecting the function loadCustomBlocCreateForm of the file /core/tools/customblock.php in the component Dashboard. Th...

PT-2023-28009 · Unknown · Esst Monitoring

Name of the Vulnerable Software and Affected Versions: eSST Monitoring version 2.147.1 Description: A lack of input sanitizing in the file download feature allows attackers to execute a path traversal. Recommendations: For eSST Monitoring version 2.147.1, consider disabling the file download...