669 matches found
CVE-2022-24108: Deserialization of Untrusted Data
The Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parameter, potentially resulting in the ability to write to files on the server, cause DoS, and achieve remote code execution because of deserialization of untrusted...
PT-2022-16469
Name of the Vulnerable Software and Affected Versions Skyoftech So Listing Tabs module version 2.2.0 for OpenCart Description The issue allows a remote attacker to inject a serialized PHP object via the setting parameter, potentially resulting in the ability to write to files on the server, cause...
OpenCart 代码问题漏洞
Opencart is an open source e-commerce system by Opencart team. The system provides modules for product reviews, product ratings, and product additions. A security vulnerability exists in the Skyoftech So Listing Tabs module for OpenCart version 2.2.0, which can be exploited by remote attackers to...
WordPress Import and export users and customers plugin <= 1.19.2 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by 0x23.so in WordPress Import and export users and customers plugin versions = 1.19.2. Solution Update the WordPress Import and export users and customers plugin to the latest available version at least 1.19.2.1...
Heap-based Buffer Overflow
libde265.so is vulnerable to heap-based buffer overflow. The lack of sanitization causes a heap-based buffer overflow in readspsNAL function in decctx.cc, which results in an application crash...
PolicyKit-1 0.105-31 - Privilege Escalation Exploit
Exploit Title: PolicyKit-1 0.105-31 - Privilege Escalation Exploit Author: Lance Biggerstaff Original Author: ryaagard https://github.com/ryaagard Github Repo: https://github.com/ryaagard/CVE-2021-4034 References: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Description: The exploit...
Use After Free
libhdf5.so is vulnerable to use after free. The vulnerability exists in H5ACunpinentry because the user inputs are not validated leading to a memory corruption...
so-mutuelle.fr Cross Site Scripting vulnerability OBB-2334435
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
so.99.com.cn Cross Site Scripting vulnerability OBB-2311733
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Denial Of Service (DoS) Through Heap Buffer Overflow
libheif.so is vulnerable to denial of service through heap-based buffer overflow attacks. The vulnerability exists in 'convertcolorspace' in 'heifcolorconversion.cc' of the heif file handler. A malicious attacker is able to send a crafted HEIF to gain sensitive information and cause an applicatio...
so-san.de Cross Site Scripting vulnerability OBB-2143492
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Denial Of Service (DoS)
libde265.so is vulnerable to denial of service. An attacker is able to send malicious input to the decodeCABACbit function to cause a heap buffer overflow...
Denial Of Service (DoS)
libde265.so is vulnerable to denial of service. An attacker is able to send malicious input to the putepel16fallback function to cause a heap buffer overflow...
Denial Of Service (DoS)
libde265.so is vulnerable to denial of service. An attacker is able to send malicious input to the putweightedbipred16fallback function to cause a heap buffer overflow...
SUSE: Security Advisory (SUSE-SU-2016:2018-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-13963
SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp which is a guest account...
HPE Apollo 安全漏洞
The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webgetactivexcfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...
CVE-2020-27985
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...
PT-2020-16889
Name of the Vulnerable Software and Affected Versions Security Onion v2 versions prior to 2.3.10 Description The issue is related to an incorrect sudo configuration, allowing local users to obtain root access without using the sudo password. This can be achieved by editing and executing...
CVE-2020-27985: Missing Authentication for Critical Function
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home/ /SecurityOnion/setup/so-setup...