Medium: ghostscript

Issue Overview: A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function pdfferror of the file devices/vector/gdevpdf.c of the component New Output File Open Error Handler. The manipulation leads...

Linux ieee802154hdr_peek_addrs Buffer Overflow

The vulnerability of the ieee802154hdrpeekaddrs function in the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of t...

UBUNTU-CVE-2025-3408

A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stbdupreplace. The manipulation leads to integer overflow. The attack may be launched remotely. Continious delivery with rolling releases is used by this product...

envoy load shed points http1 server abort dispatch DoS

The vulnerability of the envoy.loadshedpoints.http1serverabortdispatch configuration on the proxy server is related to incorrect implementation of control flow management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Netgear R8500 Router Arbitrary Command Execution

The vulnerability of the bswfix.cgi script of the Netgear R8500 router software relates to the failure to eliminate special elements used in the operating system’s commands when processing the wangateway parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...

CVE-2024-10608 code-projects Courier Management System login.php sql injection

A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has be...

DEBIAN-CVE-2024-7272

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fillaudiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versio...

libnbd Heap Buffer Overflow DoS

The vulnerability of the nbdgetsize function in the libnbd library is related to responses received by the server from blocks that are larger than 2^63 bytes. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2024-7330 YouDianCMS ydLib.php curl_exec server-side request forgery

A vulnerability has been found in YouDianCMS 7 and classified as critical. Affected by this vulnerability is the function curlexec of the file /App/Core/Extend/Function/ydLib.php. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The...

CVE-2024-6938

SiYuan 3.1.0 is affected by CVE-2024-6938 in the PDF Handler’s PDF.js functionality. The vulnerability enables cross-site scripting via the PDF.js component, with remote exploitation possible. The PT-2024-37976 entry confirms this affects SiYuan 3.1.0 and attributes the issue to the PDF.js file w...

CVE-2024-3148 DedeCMS makehtml_archives_action.php sql injection

A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112. This issue affects some unknown processing of the file dede/makehtmlarchivesaction.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

Linux kernel macsec_add_dev Heap Buffer Overflow DoS

The vulnerability of the macsecadddev function in the drivers/net/macsec.c module of the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the bfdelfslurpversiontables function in the elf.c component of the GNU Binutils development environment is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...

CVE-2023-43700

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication...

CVE-2023-42387

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...

CVE-2023-3231 UJCMS ZIP Package information disclosure

A vulnerability has been found in UJCMS up to 6.0.2 and classified as problematic. This vulnerability affects unknown code of the component ZIP Package Handler. The manipulation of the argument dir leads to information disclosure. The attack can be initiated remotely. The complexity of an attack ...

ReportLab rl_safe_eval() Code Execution

The vulnerability of the rlsafeeval function in the ReportLab library is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to bypass security restrictions and execute arbitrary code...

CVE-2023-2411

A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/viewinquiry.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

Undo Mark Statuses As Sensitive

The vulnerability of the undomarkstatusesassensitive method app/services/approveappealservice.rb in the web application for deploying distributed social networks like Mastodon is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker, operating...

SUSE CVE-2006-2444

The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...