10677 matches found
Synapse Security Breach
synapse is an application for open federated instant messaging and VoIP A security vulnerability exists in Synapse that stems from the temporary storage of plaintext passwords during password changes. Affected products and versions; Synapse versions prior to 1.66.0 through 1.93.0...
nodejs-semver: Regular expression denial of service
A Regular Expression Denial of Service ReDoS vulnerability was discovered in node-semver package via the 'new Range' function. This issue could allow an attacker to pass untrusted malicious regex user data as a range, causing the service to excessively consume CPU depending upon the input size,...
nodejs-semver: Regular expression denial of service
A Regular Expression Denial of Service ReDoS vulnerability was discovered in node-semver package via the 'new Range' function. This issue could allow an attacker to pass untrusted malicious regex user data as a range, causing the service to excessively consume CPU depending upon the input size,...
nodejs-semver: Regular expression denial of service
A Regular Expression Denial of Service ReDoS vulnerability was discovered in node-semver package via the 'new Range' function. This issue could allow an attacker to pass untrusted malicious regex user data as a range, causing the service to excessively consume CPU depending upon the input size,...
nodejs-semver: Regular expression denial of service
A Regular Expression Denial of Service ReDoS vulnerability was discovered in node-semver package via the 'new Range' function. This issue could allow an attacker to pass untrusted malicious regex user data as a range, causing the service to excessively consume CPU depending upon the input size,...
Siemens InsydeH2O Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2021-41838)
An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of a Numeric Range Comparison Without a Minimum Check. Insyde BIOS is...
Important: firefox
Issue Overview: The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. This vulnerability affects Thunderbird 91.9. CVE-2022-29913 A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describe...
Medium: squid
Issue Overview: Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody. CVE-2021-28116 An issue was discovered in Squid...
PT-2023-9487 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a soft lockup triggered by the arm smmu mm invalidate range function in the Linux kernel's iommu/arm-smmu-v3 component. When running an SVA case, a soft...
WordPress Plugin Welcart e-Commerce SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
The vulnerability of the PHP programming language, related to the use of insufficiently random values, allows attackers to gain access to confidential data.
The vulnerability of the PHP programming language lies in the use of a random number generator that operates within a narrow range of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
CVE-2023-38718
IBM Robotic Process Automation 21.0.0 through 21.0.7.8 could disclose sensitive information from access to RPA scripts, workflows and related data. IBM X-Force ID: 261606...
PT-2023-27415 · Ibm · Ibm Storage Protect
Name of the Vulnerable Software and Affected Versions: IBM Storage Protect versions 8.1.0.0 through 8.1.19.0 Description: The issue allows a privileged user to obtain sensitive information from the administrative command line client. Recommendations: For versions 8.1.0.0 through 8.1.19.0, conside...
GraphQL.js Resource Management Error Vulnerability
GraphQL.js is a GraphQL reference implementation for JavaScript in the GraphQL open source. A security vulnerability exists in GraphQL.js versions 16.3.0 through 16.8.1, which stems from insufficient checking in the OverlappingFieldsCanBeMergedRule.ts file when parsing a large query, making it...
CVE-2022-28357
NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account...
Nats-Server Path Traversal Vulnerability
Nats-Server is a high-performance server for Nats.io, cloud and edge native messaging systems. A path traversal vulnerability exists in Nats-Server versions 2.2.0 through 2.7.4, which stems from a path from an administrative account to an administrative operation that is not as expected...
Vyper Security Vulnerability
Vyper is the Pythonic smart contract language for EVM. A security vulnerability exists in Vyper versions 0.2.9 through 0.3.10, which stems from the fact that locks of type @nonreentrant or @nonreentrant are not reentrant-checked at runtime...
PT-2023-5448
Name of the Vulnerable Software and Affected Versions GitLab EE versions 13.12 through 16.2.7 GitLab EE versions 16.3 through 16.3.4 GitLab Community Edition CE versions 13.12 through 16.2.7 GitLab Community Edition CE versions 16.3 through 16.3.4 Description The issue is related to a flaw in...