CVE-2019-17997

LayerBB 1.1.3 has a cross-site scripting issue linked to CVE-2019-13972, allowing XSS via the pm_title parameter in application/commands/new.php. The connected records note this as a related issue to CVE-2019-17997, indicating the vector relies on the pm_title input. The documentation confirms th...

CVE-2019-18940

CVE-2019-18976 describes a NULL pointer dereference in res_pjsip_t38.c affecting Sangoma Asterisk up to version 13.x and Certified Asterisk up to 13.21-x. If a re-invite for T.38 faxing arrives and the SDP contains a port of 0 with no c line, a crash can occur. This vulnerability is distinct from...

CVE-2032-43016

Technical details for CVE-2032-43016 are not publicly available in the provided documents; monitoring for updates is advised.

CVE-2022-45592

CVE-2022-45592 is discussed in connected documents as affecting Linux distributions (notably Debian/Ubuntu) with a set of issues: Server-Side Request Forgery (SSRF), persistent Cross-Site Scripting (XSS), and a File Upload vulnerability. The Nessus NASL notes unpatched status for Debian/Ubuntu pa...

CVE-2023-3283

The connected Palo Alto advisory PA-CVE-2023-6789 details a stored XSS vulnerability in PAN-OS web interface. It allows a malicious authenticated read-write administrator to store a JavaScript payload via the web interface, which executes when viewed by an authenticated administrator, proxying al...

CVE-2023-43020

CVE-2023-43020 is evidenced in IBM bulletins as a denial-of-service vulnerability in IBM Db2 (including Db2 Connect Server) when processing a specially crafted query. Affected products span Db2 on Linux/UNIX/Windows (versions 10.5, 11.1, 11.5; Db2 Big SQL is also listed in related bulletins). The...

CVE-2023-39120

Nodogsplash is affected by a directory traversal vulnerability (CVE-2023-39120) that also impacts OpenWrt. The issue allows remote attackers to read arbitrary files from the target system and is mitigated by upgrading Nodogsplash to version 5.0.1. The Nuclei template notes the vulnerability and s...

CVE-2023-40118

CVE-2023-40118 is addressed in ChromeOS updates as part of the Android Runtime Container security fixes. The connected ChromeOS release notes indicate CVE-2023-40118 was fixed as a Medium severity issue on impacted platforms within the Android Runtime Container, in the context of the ChromeOS Sta...

CVE-2010-13616

CVE-2010-13616 is addressed in the Mageia/OpenVAS/OSV entries as part of SDL2-related fixes. The connected docs confirm a heap-based buffer over-read in BlitNtoN (video/SDL_blit_N.c) when called from SDL_SoftBlit (video/SDL_blit.c). The vulnerability is mitigated in the SDL 2.0.10 release, which ...

CVE-2016-1000273

Technical details for CVE-2016-1000273 are not publicly available in the provided documents; no affected products, impact, or remediation are specified here. Monitor for updates.

CVE-2103-7470

Technical details for CVE-2103-7470 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-30592

Product / scope: Grav CMS (PHP, Grav

CVE-2023-30595

CVE-2023-30595 (Grav CMS) involves a server-side template injection in GravExtension.filterFilter() for Grav

CVE-2023-30596

Summary: CVE-2023-30596 is a Grav CMS vulnerability (SSTI) in Grav

CVE-2020-22592

CVE-2020-22592 is associated with WebKitGTK in WebKitGTK/WebKit components. The connected advisories indicate a logic issue addressed with improved state management in WebKitGTK prior to version 2.38.5, and a separate use-after-free/memory-management cleanup fixed in later releases. Specifically,...

forum.hiwit.com Cross Site Scripting vulnerability OBB-3412505

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2014-9086

The connected Veracode entry identifies a vulnerability in ImageMagick characterized as an information disclosure through a file descriptor leak caused by a corrupted file. Affected component: ImageMagick’s handling of file inputs may leak file descriptors, enabling exposure of sensitive data. Ro...

CVE-2018-9863

The CVE-2018-9863 entry concerns the express-useragent Node.js/ExpressJS middleware. The connected documents reveal a concrete vulnerability: lack of sanitization/escaping of the HTTP User-Agent header , which an attacker can exploit to trigger Cross-site Scripting (XSS) . Impact described across...

CVE-2017-12968

The connected document provides concrete details for CVE-2017-12968: libexiv2.so is vulnerable to a denial of service (DoS) via a heap-based buffer overflow. The vulnerability exists in basicio.cpp, causing an out-of-bounds write in Exiv2::Image::printIFDStructure. This information confirms the a...

CVE-2018-7646

The connected Veracode entry identifies a denial of service in svgexport caused by a missing timeout when loading an external image. Impact is DoS; no exploit details are provided in the supplied documents. No CVE-specific remediation is stated here; monitor for updates.