CVE-2023-47511

CVE-2023-47511 affects the WordPress plugin SO WP Pinyin Slugs, vulnerable to an authenticated Stored XSS in versions <= 2.3.0. The issue requires admin-level privileges (admin+) and, per Patchstack, was fixed in version 2.3.1. Public sources (NVD and patch info) describe the CVSS vector as in...

Out-of-bounds Write

libexiv2.so is vulnerable to Out-of-bounds Write. The vulnerability exists because of an integer overflow in the brotliUncompress function within bmffimage.cpp. This flaw enables an attacker to manipulate and potentially read, write, delete, or modify image metadata such as Exif, IPTC, XMP, and I...

FreeBSD : OpenSSL -- potential loss of confidentiality (4a4712ae-7299-11ee-85eb-84a93843eb75)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4a4712ae-7299-11ee-85eb-84a93843eb75 advisory. - SO-AND-SO reports: Moderate severity: A bug has been identified in the processing of key and...

Out-of-bounds Read

ibX11.so is vulnerable to Out-of-bounds Read. The vulnerability is due to function XkbReadKeySyms allocating insufficient memory for the keysym buffer also failure to handle errors returned by XkbReadBufferCopyKeySyms. This can leads to potential buffer overflow and out-of-bounds memory access...

MAL-2023-8350 Malicious code in so-loader-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404b6971c77426e284e330430c8b8f418e3a0622bc881dbc1dae7b32264ee032 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in so-loader-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404b6971c77426e284e330430c8b8f418e3a0622bc881dbc1dae7b32264ee032 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Buffer Overflow

libkrb5.so is vulnerable to Buffer Overflows. A buffer overflow in the RPC library can be exploited by remote attackers to cause a denial of service or an arbitrary code execution. This vulnerability is only exploitable on systems whose unistd.h header file which does not define the FDSETSIZE mac...

Denial Of Service (DoS)

libhdf5.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack-based buffer overflow in H5Eint.c, which allows an attacker to cause an application crash by providing a maliciously crafted input...

Buffer Overflow

libhdf5.so is vulnerable to Buffer Overflow. There is no explicit check in H5Oattrdecode to verifying that the multiplication operation didn't exceed the addressable range. The fixed code can check for overflow by dividing attr-shared-datasize by dtsize and comparing the result to dssize...

Denial Of Service (DoS)

libexiv2.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the PngImage::printStructure function at pngimage.cpp due to a buffer overflow which allows an attacker to cause an application crash...

Use After Free

libz3.so is vulnerable to Use After Free. The vulnerability exists in the pddsimplifier.cpp when the solver attempts to simplify the constraints, which causes unexpected memory access, leading to segmentation faults or arbitrary code execution...

Double Free

libkrb5.so is vulnerable to Double Free. The vulnerability exists due to a failure in authorization data handling in the dotgsreq.c, which allows an attacker to cause the Key Distribution Center KDC to free the same pointer twice when incorrect data is copied from one ticket to another...

Integer Overflow

libImlib2.so is vulnerable to Integer Overflow. The vulnerability exists due to invalid memory allocations which allows an attacker to cause an overflow and out-of-bound reads...

Denial Of Service (DoS)

libbind9.so is vulnerable to Denial Of Service DoS. The vulnerability exists when debug logging is turned on, due to assertion errors in renderecs which allows an attacker to cause an application crash...

Hardcoded credentials

An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...

CVE-2023-22957

An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...

Heap-based Buffer Overflow

libmp4v2.so is vulnerable to Heap-based Buffer Overflow. The vulnerability is due to not validating the input parameter newSize of function Resize in the file mp4array.h . This can lead to buffer overflow while allocating memory to MP4Array array...

Denial Of Service (DOS)

libbzip3.so is vulerable to Denial Of Service. The vulnerability is due to not setting zeroed temporary array while interacting with libsais in the function bz3new in file libbz3.c resulting in Denial Of Service attack...

Out-of-bounds Read

libbzip3.so is vulnerable to Out-of-bounds Read. The vulnerability is due to not validating input parameters correctly in the function process inside main.c file. This leads to out-of-bounds-read...

kappel-so.ch Cross Site Scripting vulnerability OBB-3513379

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...