13092 matches found
CVE-2023-29584
mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp...
GHSA-CJR9-MR35-7XH6 vulnerabilities
Vulnerabilities for packages: spicedb...
BELL-CVE-2023-30630
Bulletin has no description...
OSV-2023-309 UNKNOWN READ in fmemopen_unlocked
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57936 Crash type: UNKNOWN READ Crash state: fmemopenunlocked fuzz.h centipede::RunOneInput...
OSV-2023-299 UNKNOWN READ in log_set_max_level
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57912 Crash type: UNKNOWN READ Crash state: logsetmaxlevel fuzz-journal-remote.c centipede::RunOneInput...
CVE-2023-1993
LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file...
FortiWeb - XSS vulnerability in HTML generated attack report files
An improper neutralization of input during web page generation CWE-79 in the FortiWeb web interface may allow an unauthenticated and remote attacker to perform a reflected cross site scripting attack XSS via injecting malicious payload in log entries used to build report...
CVE-2023-26917
libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lyspstmtvalidatevalue at lysparsemem.c...
Heap-Based Buffer Overflow
libadmesh.so is vulnerable to Heap-Based Buffer Overflow. An attacker is able to cause buffer overflows by parsing a specially crafted stl file with malicious content through the stlfixnormaldirections function in normals.c...
Apache Airflow Hive Provider vulnerable to code injection
Apache Software Foundation's Apache Airflow Hive Provider before 6.0.0 is vulnerable to improper control of generation of code...
DLA-3387-1 udisks2 - security update
Bulletin has no description...
Privilege Escalation
xwayland is vulnerable to Privilege Escalation. When a client explicitly destroys the compositor overlay window, the server would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free resulting in local privilege escalation...
GHSA-582P-2FPG-X226 Microweber vulnerable to command injection
microweber/microweber prior to 1.3.3 is vulnerable to command injection in the "first name" field. This allows for server-side template injection, which can lead to arbitrary code execution...
OSV-2023-279 Heap-use-after-free in filename_cmp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57678 Crash type: Heap-use-after-free READ 3 Crash state: filenamecmp debugstartsource parsestab...
CVE-2023-1758 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq
Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
PT-2023-35749 · Simdutf · Simdutf
Name of the Vulnerable Software and Affected Versions: simdutf affected versions not specified Description: The issue is related to a heap buffer overflow error. It occurs in the simdutf::haswell::convert masked utf8 to utf16 function, specifically in the simdutf::haswell::implementation::convert...
CVE-2023-1579
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfdgetl64...
PUB-A-250649259
Bulletin has no description...