2007 matches found
PT-2022-10636
Name of the Vulnerable Software and Affected Versions nbdkit affected versions not specified Description A flaw was found in nbdkit due to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD OPT STRUCTURED REPLY...
WordPress AutoMail – Event-driven Email Automation. Easy email Notification and Auto-reply plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress AutoMail – Event-driven Email Automation. Easy email Notification and Auto-reply plugin versions = 1.0.0. Solution Update the WordPress AutoMail – Event-driven Email Automation. Easy email Notification and Auto-reply plugin to...
CVE-2022-0279
The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other users...
CVE-2022-0279
The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other users...
PT-2022-36829
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 4 crash type has been reported. The crash state includes functions such as print mac, log packet, and dhcp reply...
dnsmasq:fuzz_dhcp: Heap-buffer-overflow in print_mac
Detailed Report: https://oss-fuzz.com/testcase?key=5769815149641728 Project: dnsmasq Fuzzing Engine: honggfuzz Fuzz Target: fuzzdhcp Job Type: honggfuzzasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6070000000dc Crash State: printmac logpacket dhcpreply...
Intel Connman Information Disclosure Vulnerability (CNVD-2022-09128)
Connman is a connection manager. a security vulnerability exists in Connman's DNS proxy, which stems from the fact that the TCP server reply implementation has an infinite loop. No details of the vulnerability are currently available...
nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS
A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBDOPTSTRUCTUREDREPLY before proxying everything else a client sends to the server, potentially leading the client to terminat...
PT-2022-1006
Name of the Vulnerable Software and Affected Versions FreeRADIUS affected versions not specified Description The issue concerns a bug in the FreeRADIUS server, which is a high-performance and highly configurable free Remote Authentication Dial In User Service RADIUS server. It is designed to allo...
CVE-2022-23096: Out-of-bounds Read
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read...
PT-2022-2659
Name of the Vulnerable Software and Affected Versions Connman versions 1.40 and earlier Description An issue was discovered in the DNS proxy of Connman. The TCP server reply implementation has an infinite loop if no data is received, potentially allowing a remote attacker to cause a denial of...
CVE-2022-23096
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read...
CVE-2022-23096
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read...
CVE-2022-23098
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...
CVE-2022-21683
Wagtail CVE-2022-21683 affects the notification logic for new replies in comment threads. The issue caused notifications to be sent to all users who have commented or replied anywhere on the site, rather than only to participants within the active thread. This could allow users without editing ac...
GHSA-R478-C2PC-M7GX dnslib has DNS reply verification issue
The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query...
dnslib has DNS reply verification issue
The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query...
CVE-2022-22846
The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query...
