5885 matches found
Google Chrome security vulnerabilities
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which is caused by the window.showSaveFilePicker function that parses and returns environment variable values to the user when passing environment variables, which can be exploited by an attacker to...
libvips:webpsave_buffer_fuzzer: Heap-use-after-free in save_marker
Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6427211915198464 Project: libvips Fuzzing Engine: afl Fuzz Target: webpsavebufferfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address:...
April 5, 2022, update for Project 2016 (KB5002132)
None None...
libvips:gifsave_buffer_fuzzer: Heap-use-after-free in jpeg_fill_bit_buffer
Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5252884758921216 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: gifsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address:...
WordPress plugin MapPress Maps code vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress MapPress Maps plugin has an authorization problem vulnerability that stems from a lack of authentication measures or...
CVE-2021-32957
A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is...
CVE-2022-1075
A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=savecontact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched...
Passwords stored in plain text by instant-messaging
instant-messaging provides a framework for plugins integrating Jenkins with instant messaging services. instant-messaging 1.41 and earlier stores passwords for group chats unencrypted in the global configuration file of plugins based on instant-messaging on the Jenkins controller. These passwords...
PT-2022-13637
Name of the Vulnerable Software and Affected Versions College Website Management System version 1.0 Description A vulnerability was found in the College Website Management System, affecting the file "/cwms/classes/Master.php?f=save contact" of the component Contact Handler. This issue leads to...
Sourcecodester Simple College Website Cross-site Scripting Vulnerability
Sourcecodester Simple College Website is Sourcecodester an open source application . A content management system. A security vulnerability exists in College Website Management System 1.0, which can be exploited by a remote attacker via the file /cwms/classes/Master.php?f=savecontact of the...
CVE-2022-26278
Tenda AC9 v15.03.2.21cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function...
CVE-2022-26278
Tenda AC9 v15.03.2.21cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function...
Just-Released Dark Souls Game, Elden Ring, Includes Killer Bug
The latest installment of the Dark Souls gaming franchise, Elden Ring, contains a security vulnerability that allows bad actors to throw players on PCs into an endless loop of losing their characters’ lives, rendering it essentially unplayable. Malwarebytes Labs researcher Christopher Boyd said...
CVE-2021-27476
A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier...
mariadb: save_window_function_values triggers an abort during IN subquery
savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindowfunc=true for a subquery...
CVE-2022-25445
Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function...
CVE-2022-25452
Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function...
CVE-2022-25452
Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function...