1384 matches found
CVE-2023-40474
CVE-2023-40474 is a GStreamer MXF parsing vulnerability caused by an integer overflow when processing MXF files, leading to remote code execution in vulnerable GStreamer deployments. The issue stems from insufficient validation of user-supplied data, which allows the overflow to occur during buff...
CVE-2023-38104
CVE-2023-38104 affects GStreamer realmedia parsing: the MDPR chunk parsing path allows an integer overflow when allocating buffers, enabling remote code execution in the context of the affected process. The vulnerability is network-remote with no user authentication required and requires user int...
CVE-2023-38089
CVE-2023-38089 concerns Kofax Power PDF with an Out-of-Bounds Write in the handling of app objects. The flaw arises from insufficient validation of user-supplied data, causing a write past the end of an allocated buffer and enabling Remote Code Execution in the context of the current process. Exp...
CVE-2023-37329
CVE-2023-37329 concerns a heap-based buffer overflow in GStreamer’s SRT subtitle file parsing. The flaw stems from insufficient validation of the length of user-supplied data before copying to a heap buffer, enabling remote code execution in the affected process. This is tied to ZDI-CAN-20968. Co...
CVE-2023-37328
GStreamer PGS subtitle parsing flaw (CVE-2023-37328) causes a heap-based buffer overflow that can enable remote code execution. It affects gstreamer1-plugins-base and related GStreamer components; the issue arises from inadequate validation of user-supplied data length during PGS subtitle parsing...
CVE-2023-37327
Consolidated: CVE-2023-37327 targets GStreamer, specifically the FLAC file parsing path. The flaw is an integer overflow while handling FLAC data, leading to a heap overwrite and remote code execution. The issue affects gstreamer1-plugins-good (and related GStreamer components) and has had vendor...
CVE-2024-2467
CVE-2024-2467 is a timing-based side-channel vulnerability in the perl-Crypt-OpenSSL-RSA package affecting legacy PKCS#1 v1.5 padding. The issue can enable plaintext recovery over a network under a Bleichenbacher-style attack if an attacker can send many trial messages. Publicly documented fixes ...
CVE-2024-1657
CVE-2024-1657 : A flaw in Red Hat Ansible Automation Platform involves an insecure WebSocket used when interacting with the EDA server during installation from the Ansible rulebook. An attacker with access to any machine in the CIDR block could download all rulebook data, impacting confidentialit...
CVE-2023-6596
Technical details for CVE-2023-6596 are not publicly available in the provided documents. Monitor for updates from Red Hat/OpenShift advisories.
CVE-2023-6484
CVE-2023-6484 describes a log injection flaw in Keycloak occurring when using WebAuthn in authentication form. The vulnerability arises from unsanitized text that can be injected into logs during WebAuthn login/registration, potentially affecting log integrity with a minor impact per CVSS 3.1 met...
CVE-2023-5675
CVE-2023-5675 affects Quarkus RestEasy Classic/Reactive JAX-RS endpoints where methods are declared in abstract classes or altered by extensions via annotation processors; authorization may not be enforced when quarkus.security.jaxrs.deny-unannotated-endpoints or quarkus.security.jaxrs.default-ro...
CVE-2023-52220
CVE-2023-52220 is a Missing Authorization/Broken Access Control vulnerability in the WordPress plugin Google Analytics by Monster Insights (versions
CVE-2023-51484
CVE-2023-51484 is an Improper Authentication vulnerability in the WordPress plugin Login as User or Customer (User Switching) that allows Privilege Escalation. Affected: wp-buy Login as User or Customer (User Switching) up to version 3.8. CVSS 3.1/3.1. Overall risk: 9.8 (CRITICAL) per the CVSS me...
CVE-2023-51478
CVE-2023-51478 (Build App Online) is substantiated by connected PT-secure sources: an improper authentication flaw allows unauthenticated privilege escalation leading to potential account takeover in Build App Online versions 1.0.19 and earlier. The affected software is Build App Online; exploita...
CVE-2023-6237
The OpenSSL library is vulnerable to a Denial of Service (DoS) attack due to a lack of restrictions on RSA public key sizes during validation. When the EVP_PKEY_public_check() function processes an RSA key with an excessively large prime modulus from an untrusted source, the computation to confir...
CVE-2023-20249
CVE-2023-20249 affects Cisco TelePresence Management Suite (TMS) web-based management interface. Affected component: the TMS web UI; root cause: insufficient input validation in the interface allows an authenticated, remote attacker to perform cross-site scripting (XSS). Impact: attacker can exec...
CVE-2023-20248
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software allows an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The root cause is insufficient input validation , where an attacker can insert malicious data into a...
CVE-2024-20313
CVE-2024-20313 affects Cisco IOS XE Software, specifically the OSPFv2 feature. The issue arises from improper validation of OSPF updates, allowing an unauthenticated, adjacent attacker to send a malformed OSPF update that can cause the device to reload and trigger a DoS. Connected sources corrobo...
CVE-2023-51477
The BuddyBoss Theme for WordPress is affected by an Improper Authentication vulnerability in versions 2.4.60 and earlier . This flaw allows unauthenticated attackers to access functionality that is not properly constrained by Access Control Lists (ACLs), specifically enabling an arbitrary WordPre...