1249 matches found
PT-2023-30925 · Unknown · Student Result Management System
Name of the Vulnerable Software and Affected Versions: Student Result Management System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The class name parameter of the "add results.php" resource does not validate the characters received, and the...
PT-2023-31439 · Unknown · Student Result Management System
Name of the Vulnerable Software and Affected Versions: Best Student Result Management System version 1.0 Description: A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization. Recommendations: For Best Student Result...
The upload_compliance_result.xml file is not created immediately after enabling automatic upload
Uploadcomplianceresult.xml is not created immediately after enabling automatic upload...
PT-2023-32637 · Unknown · Quarkus Cache Runtime
Name of the Vulnerable Software and Affected Versions: Quarkus Cache Runtime affected versions not specified Description: A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the...
PT-2023-32609 · Unknown +1 · Mosesdecoder +1
Name of the Vulnerable Software and Affected Versions: moses-smt mosesdecoder versions up to 4.0 Description: A critical issue was found in the mosesdecoder, affecting an unknown part of the file contrib/iSenWeb/trans result.php. The manipulation of the input1 argument leads to os command...
Malicious code in gog-module-event-bus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4fb2c212daa3b898b2df5ffdf458a7751515e92268bd6b3b13ac45894235be3c The OpenSSF Package Analysis project identified 'gog-module-event-bus' @ 1.0.1 npm as malicious. It is considered malicious because: - The packa...
OSV-2023-1088 Heap-buffer-overflow in arrow::Status arrow::Result<std::__1::unique_ptr<arrow::Buffer, std::__1::defaul
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63679 Crash type: Heap-buffer-overflow WRITE 8 Crash state: arrow::Status arrow::Resultstd::1::uniqueptrarrow::Buffer, std::1::defaul arrow::ipc::ArrayLoader::GetBuffer arrow::ipc::ArrayLoader::Visit...
DEBIAN-CVE-2023-45667
stbimage is a single file MIT licensed library for processing images. If stbiloadgifmain in stbiloadgiffrommemory fails it returns a null pointer and may keep the z variable uninitialized. In case the caller also sets the flip vertically flag, it continues and calls stbiverticalflipslices with th...
CVE-2023-45639
Cross-Site Request Forgery CSRF vulnerability in Codex-m Sort SearchResult By Title plugin = 10.0 versions...
CLSA-2023-1696537325 Fix of 10 CVEs
SECURITY UPDATE: a heap-based buffer overflow - debian/patches/CVE-2018-25009.patch: add additional check to avoid read over the header - CVE-2018-25009 SECURITY UPDATE: a heap-based buffer overflow - debian/patches/CVE-2018-25010.patch: limit the filter size to not exceed the image dimensions -...
CVE-2023-41580
Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname parameter at /users/ad-search-result.php. This vulnerability allows attackers to enumerate arbitrary fields in the LDAP server and access sensitive data via a crafted POST request...
PT-2023-29116 · Unknown · Lockscreensettings
Name of the Vulnerable Software and Affected Versions: LockScreenSettings affected versions not specified Description: The issue is related to the theft of arbitrary files with system privilege in the LockScreenSettings app. The main problem is that the app launches implicit intents that can be...
OESA-2023-1638 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A use-after-free vulnerability in the Linux kernel's net/sched: clsroute component can be exploited to achieve local privilege escalation. When route4change is called on an existing filter, the whole tcfresult struct is always...
DEBIAN-CVE-2023-4207
A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. When fwchange is called on an existing filter, the whole tcfresult struct is always copied into the new instance of the filter. This causes a problem when updati...
DEBIAN-CVE-2023-4208
A use-after-free vulnerability in the Linux kernel's net/sched: clsu32 component can be exploited to achieve local privilege escalation. When u32change is called on an existing filter, the whole tcfresult struct is always copied into the new instance of the filter. This causes a problem when...
UBUNTU-CVE-2023-4206
A use-after-free vulnerability in the Linux kernel's net/sched: clsroute component can be exploited to achieve local privilege escalation. When route4change is called on an existing filter, the whole tcfresult struct is always copied into the new instance of the filter. This causes a problem when...
swapGivenInputAmount checks the wrong result out
Lines of code Vulnerability details Impact Wrong check amount results in unusable function. Proof of Concept swapGivenInputAmount calcaultes the value of result after calling swap. The check then requires that result 0. However, the comment states that amount cannot be less than 0...
Malicious code in test-result-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be46efd7d71b6494d55cf52ec783c591c2bfe3524cdfcc6a9d17ed75abb8d492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1525 Malicious code in test-result-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be46efd7d71b6494d55cf52ec783c591c2bfe3524cdfcc6a9d17ed75abb8d492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...