CVE-2023-3283

The connected Palo Alto advisory PA-CVE-2023-6789 details a stored XSS vulnerability in PAN-OS web interface. It allows a malicious authenticated read-write administrator to store a JavaScript payload via the web interface, which executes when viewed by an authenticated administrator, proxying al...

CVE-2023-37366

CVE-2023-37366 is a DoS flaw affecting Google Pixel cellular baseband/modem components. Public details from Pixel security bulletin map it to a DoS issue for Pixel devices (2023-12 patch level). An OSV entry confirms a root cause in cd_parseMsg of cd_codec.c where improper input validation can ca...

CVE-2023-43020

CVE-2023-43020 is evidenced in IBM bulletins as a denial-of-service vulnerability in IBM Db2 (including Db2 Connect Server) when processing a specially crafted query. Affected products span Db2 on Linux/UNIX/Windows (versions 10.5, 11.1, 11.5; Db2 Big SQL is also listed in related bulletins). The...

CVE-2023-39120

Nodogsplash is affected by a directory traversal vulnerability (CVE-2023-39120) that also impacts OpenWrt. The issue allows remote attackers to read arbitrary files from the target system and is mitigated by upgrading Nodogsplash to version 5.0.1. The Nuclei template notes the vulnerability and s...

CVE-2023-40118

CVE-2023-40118 is addressed in ChromeOS updates as part of the Android Runtime Container security fixes. The connected ChromeOS release notes indicate CVE-2023-40118 was fixed as a Medium severity issue on impacted platforms within the Android Runtime Container, in the context of the ChromeOS Sta...

CVE-2023-24287

CVE-2023-24287 is a published buffer overrun issue reported across Ubuntu and Debian trackers related to the Undead puzzle. A crafted save file can cause a buffer overrun; the connected documents describe Ubuntu/Debian entries but do not provide explicit patch versions or remediation steps. Explo...

CVE-2023-24291

CVE-2023-24291 is a vulnerability affecting Simon Tatham’s Portable Puzzle Collection, described across multiple sources as a crafted save file causing a buffer overrun/overflow. Connected documents indicate this affects Linux/Ubuntu environments (e.g., an Ubuntu package). The exact affected vers...

CVE-2010-13616

CVE-2010-13616 is addressed in the Mageia/OpenVAS/OSV entries as part of SDL2-related fixes. The connected docs confirm a heap-based buffer over-read in BlitNtoN (video/SDL_blit_N.c) when called from SDL_SoftBlit (video/SDL_blit.c). The vulnerability is mitigated in the SDL 2.0.10 release, which ...

CVE-2016-1000273

Technical details for CVE-2016-1000273 are not publicly available in the provided documents; no affected products, impact, or remediation are specified here. Monitor for updates.

CVE-2103-7470

Technical details for CVE-2103-7470 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-30592

Product / scope: Grav CMS (PHP, Grav

CVE-2023-30595

CVE-2023-30595 (Grav CMS) involves a server-side template injection in GravExtension.filterFilter() for Grav

CVE-2023-30596

Summary: CVE-2023-30596 is a Grav CMS vulnerability (SSTI) in Grav

CVE-2020-22592

CVE-2020-22592 is associated with WebKitGTK in WebKitGTK/WebKit components. The connected advisories indicate a logic issue addressed with improved state management in WebKitGTK prior to version 2.38.5, and a separate use-after-free/memory-management cleanup fixed in later releases. Specifically,...

forum.hiwit.com Cross Site Scripting vulnerability OBB-3412505

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2014-9086

The connected Veracode entry identifies a vulnerability in ImageMagick characterized as an information disclosure through a file descriptor leak caused by a corrupted file. Affected component: ImageMagick’s handling of file inputs may leak file descriptors, enabling exposure of sensitive data. Ro...

CVE-2018-9863

The CVE-2018-9863 entry concerns the express-useragent Node.js/ExpressJS middleware. The connected documents reveal a concrete vulnerability: lack of sanitization/escaping of the HTTP User-Agent header , which an attacker can exploit to trigger Cross-site Scripting (XSS) . Impact described across...

CVE-2017-12968

The connected document provides concrete details for CVE-2017-12968: libexiv2.so is vulnerable to a denial of service (DoS) via a heap-based buffer overflow. The vulnerability exists in basicio.cpp, causing an out-of-bounds write in Exiv2::Image::printIFDStructure. This information confirms the a...

CVE-2018-7646

The connected Veracode entry identifies a denial of service in svgexport caused by a missing timeout when loading an external image. Impact is DoS; no exploit details are provided in the supplied documents. No CVE-specific remediation is stated here; monitor for updates.

CVE-2018-19454

The connected document identifies a concrete vulnerability in yiisoft/yii2: information disclosure caused by credentials (e.g., HTTP auth username/password) being logged in the application’s logging target (\yii\log\Target). An attacker who can access the log files could retrieve these credential...