1268 matches found
Denial Of Service (DoS)
@octokit/webhooks is vulnerable to Denial Of Service DoS. The vulnerability is caused by a lack of exception handling in the verifyAndReceive method within src/verify-and-receive.ts. This method internally calls another method verify which throws an exception which remains unhandled. This uncaugh...
Sql injection
A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/contentbatchupaction.php. The manipulation of the argument endid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...
Denial Of Service
libgpac.so is vulnerable to Denial Of Service. The vulnerability is due to improper bound check in the cttsboxread function in src/isomedia/boxcodebase.c. This issue can be exploited by an attacker to cause Denial of Service...
CVE-2023-47465
An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service DoS via the cttsboxread function of file src/isomedia/boxcodebase.c...
CVE-2023-45480
Tenda AC10 version USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via the src parameter in the function sub47D878...
Stack overflow
Tenda AC10 version USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via the src parameter in the function sub47D878...
Tenda AC10 安全漏洞
The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10 suffers from a buffer overflow vulnerability, which originates from the sub47D878 function's src parameter failing to correctly validate the length of the input data, which can be exploited by a remote attacker to...
CVE-2023-45480
Tenda AC10 version USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via the src parameter in the function sub47D878...
CVE-2023-46363
jbig2enc v0.28 was discovered to contain a SEGV via jbig2addpage in src/jbig2enc.cc:512...
CVE-2023-46362
jbig2enc v0.28 was discovered to contain a heap-use-after-free via jbig2encautothresholdusinghash in src/jbig2enc.cc...
CVE-2023-46363
CVE-2023-46363 affects jbig2enc v0.28. The vulnerability is a SEGV triggered by the function jbig2_add_page in src/jbig2enc.cc:512. Documented impact notes indicate a High availability impact, with local access and user interaction requirements per CVSS metrics. Connected sources (e.g., PT-Securi...
CVE-2023-46363
jbig2enc v0.28 was discovered to contain a SEGV via jbig2addpage in src/jbig2enc.cc:512...
CVE-2023-46001
Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src/isomedia/isomread.c:2807:51 function in gfisomgetuserdata...
CVE-2023-5099
The HTML filter and csv-file search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.7 via the 'src' attribute of the 'csvsearch' shortcode. This allows authenticated attackers, with contributor-level permissions and above, to include and execute...
CVE-2023-5835
A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function markdown of the file src/class/ubbparser.php. The manipulation leads to cross site scripting. The attack can be launched remotely. This product does not use versioning. This is wh...
CVE-2023-5835
CVE-2023-5835 affects hu60t/hu60wap6: the markdown function in src/class/ubbparser.php is vulnerable to cross-site scripting. The issue allows remote exploitation; information on affected releases is not provided due to no versioning. A patch is available: a1cd9f12d7687243bfcb7ce295665acb83b9174e...
CVE-2023-46345
Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c...
Null pointer dereference
Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c...
Important: python3
Issue Overview: A flaw was found in Python. The built-in modules httplib and http.client included in Python 2 and Python 3, respectively do not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation to the request by injecting additional HTTP headers. The...