12879 matches found
Design/Logic Flaw
Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account. Using this information, the attacker could...
Apache InLong security vulnerability
Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. An authorization issue vulnerability exists in Apache InLong versions 1.2.0 through 1.6.0. The vulnerability stems from improper privilege management. An attacker can exploit the vulnerabili...
Apache InLong security vulnerability
Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security vulnerability exists in Apache InLong versions 1.1.0 through 1.6.0, which stems from an application that does not set a complexity requirement for user passwords, and can be...
Apache InLong code issue vulnerabilities
Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.4.0 through 1.6.0, which stems from insufficient session expiration, and can be exploited by an attacker to reuse old...
UBUNTU-CVE-2023-33250
The Linux kernel 6.3 has a use-after-free in ioptunmapiovarange in drivers/iommu/iommufd/iopagetable.c...
PT-2023-2853
Name of the Vulnerable Software and Affected Versions Linux kernel version 6.3 Description The issue is related to a use-after-free in the iopt unmap iova range function in the drivers/iommu/iommufd/io pagetable.c module of the Linux kernel. This could allow an attacker to cause a denial of servi...
PT-2025-53234
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.150-00001-gdc8dcf942daa Description The Linux kernel contained a use-after-free condition within the binder component. Specifically, a race condition between munmap and binder update page range could lead to...
Denial Of Services (DoS)
vyper is vulnerable to Denial Of Services DoS. The vulnerability exists due to an integer overflow in the parseForrange function of stmt.py for loops of the form for i in rangex, x+N, which results in an application crash by assigning the iterator of a loop to a variable...
apache-commons-text: variable interpolation RCE
A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...
Vim < 9.0.1499 DoS
According to its version, the version of Vim installed on the remote host is prior to 9.0.1499. It is, therefore affected by a denial of service vulnerability via an out-of-range pointer offset. Note that Nessus has not tested for this issue but has instead relied only on the application's...
PT-2023-9597 · Starlette +2 · Starlette +2
Name of the Vulnerable Software and Affected Versions: Starlette versions 0.13.5 through 0.27.0 Description: The issue is related to a directory traversal vulnerability in Starlette, which allows a remote unauthenticated attacker to view files in a web service built using Starlette. This is due t...
freerdp: undefined behaviour in zgfx decoder
An out-of-bounds read vulnerability was discovered in FreeRDP due to missing a range check for input offset index in the ZGFX decoder. A malicious server can trick a FreeRDP based client to read out-of-bound data and try to decode it, resulting in a crash...
kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry
A flaw was found in include/asm-generic/tlb.h in the Linux kernel due to a race condition unmapmappingrange versus munmap. This issue allows a device driver to free a page while it still has stale TLB entries...
kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry
A flaw was found in include/asm-generic/tlb.h in the Linux kernel due to a race condition unmapmappingrange versus munmap. This issue allows a device driver to free a page while it still has stale TLB entries...
GHSA-6R8Q-PFPV-7CGJ Vyper vulnerable to integer overflow in loop
Impact Due to missing overflow check for loop variables, by assigning the iterator of a loop to a variable, it is possible to overflow the type of the latter. In the following example, calling test returns 354, meaning that the variable a did store 354 a value out of bound for the type uint8. Vyp...
Vyper vulnerable to integer overflow in loop
Impact Due to missing overflow check for loop variables, by assigning the iterator of a loop to a variable, it is possible to overflow the type of the latter. In the following example, calling test returns 354, meaning that the variable a did store 354 a value out of bound for the type uint8. Vyp...
CVE-2023-29790
kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue...
Apache OpenMeetings input validation vulnerability
Apache OpenMeetings is a multilingual, customizable video conferencing and collaboration system from the Apache Foundation. The product supports audio, video and allows users to view each participant's desktop and more. A code execution vulnerability exists in Apache OpenMeetings versions 2.0.0...
WordPress plugin Essential Addons for Elementor: Authorization issue vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An authorization issue vulnerabilit...
PT-2023-22095 · Apache · Apache Openmeetings
Name of the Vulnerable Software and Affected Versions: Apache OpenMeetings versions 3.1.3 through 7.1.0 Description: The issue allows an attacker with access to certain private information to impersonate other users. Recommendations: For Apache OpenMeetings versions 3.1.3 through 7.1.0, update to...