543 matches found
CVE-2021-42884
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack...
CVE-2022-24108
The Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parameter, potentially resulting in the ability to write to files on the server, cause DoS, and achieve remote code execution because of deserialization of untrusted...
new packages: hunspell-so
An update is available for hunspell-so. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
OpenCart 代码问题漏洞
Opencart is an open source e-commerce system by Opencart team. The system provides modules for product reviews, product ratings, and product additions. A security vulnerability exists in the Skyoftech So Listing Tabs module for OpenCart version 2.2.0, which can be exploited by remote attackers to...
WordPress Import and export users and customers plugin <= 1.19.2 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by 0x23.so in WordPress Import and export users and customers plugin versions = 1.19.2. Solution Update the WordPress Import and export users and customers plugin to the latest available version at least 1.19.2.1...
Heap-based Buffer Overflow
libde265.so is vulnerable to heap-based buffer overflow. The lack of sanitization causes a heap-based buffer overflow in readspsNAL function in decctx.cc, which results in an application crash...
PolicyKit-1 0.105-31 - Privilege Escalation Exploit
Exploit Title: PolicyKit-1 0.105-31 - Privilege Escalation Exploit Author: Lance Biggerstaff Original Author: ryaagard https://github.com/ryaagard Github Repo: https://github.com/ryaagard/CVE-2021-4034 References: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Description: The exploit...
Use After Free
libhdf5.so is vulnerable to use after free. The vulnerability exists in H5ACunpinentry because the user inputs are not validated leading to a memory corruption...
so-mutuelle.fr Cross Site Scripting vulnerability OBB-2334435
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
so.99.com.cn Cross Site Scripting vulnerability OBB-2311733
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Denial Of Service (DoS) Through Heap Buffer Overflow
libheif.so is vulnerable to denial of service through heap-based buffer overflow attacks. The vulnerability exists in 'convertcolorspace' in 'heifcolorconversion.cc' of the heif file handler. A malicious attacker is able to send a crafted HEIF to gain sensitive information and cause an applicatio...
so-san.de Cross Site Scripting vulnerability OBB-2143492
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Denial Of Service (DoS)
libde265.so is vulnerable to denial of service. An attacker is able to send malicious input to the decodeCABACbit function to cause a heap buffer overflow...
Denial Of Service (DoS)
libde265.so is vulnerable to denial of service. An attacker is able to send malicious input to the putepel16fallback function to cause a heap buffer overflow...
Denial Of Service (DoS)
libde265.so is vulnerable to denial of service. An attacker is able to send malicious input to the putweightedbipred16fallback function to cause a heap buffer overflow...
SUSE: Security Advisory (SUSE-SU-2016:2018-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-13963
SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp which is a guest account...
HPE Apollo 安全漏洞
The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webgetactivexcfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...
so-vienna.com Cross Site Scripting vulnerability OBB-1381873
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
so.66tiku.com Cross Site Scripting vulnerability OBB-1263164
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...