com.jfinal:jfinal-undertow (2.6), com.jfinal:jfinal-weixin (>=3.2, <=3.3) +2 more potentially affected by CVE-2023-49486 via com.jfinal:jfinal (4.9.15)

com.jfinal:jfinal MAVEN version 4.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.6 - com.jfinal:jfinal-weixin =3.2, =1.0, =1.6.2 - net.dreamlu:mica-weixin 2.1.1 Source cves:...

libxml2: crafted xml can cause global buffer overflow

A flaw was found in Libxml2, where it contains a global buffer overflow via the xmlSAX2StartElement function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a denial of service DoS by supplying a crafted XML file...

com.jfinal:jfinal-undertow (2.6), com.jfinal:jfinal-weixin (>=3.2, <=3.3) +2 more potentially affected by CVE-2023-49446 via com.jfinal:jfinal (4.9.15)

com.jfinal:jfinal MAVEN version 4.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.6 - com.jfinal:jfinal-weixin =3.2, =1.0, =1.6.2 - net.dreamlu:mica-weixin 2.1.1 Source cves:...

com.jfinal:jfinal-undertow (2.6), com.jfinal:jfinal-weixin (>=3.2, <=3.3) +2 more potentially affected by CVE-2023-49375 via com.jfinal:jfinal (4.9.15)

com.jfinal:jfinal MAVEN version 4.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.6 - com.jfinal:jfinal-weixin =3.2, =1.0, =1.6.2 - net.dreamlu:mica-weixin 2.1.1 Source cves:...

PHPJabbers Appointment Scheduler 3.0 Missing Rate Limiting

Exploit Title: PHPJabbers Apointment Scheduler v3.0 - No Rate Limit in Email Date: 19/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/appointment-scheduler/ Version: v3.0 Tested on: Windows...

Improper Authorization

openjdk is vulnerable to Improper Authorization. An unauthenticated attacker with network access via multiple protocols is able to potentially compromise the system and gain unauthorized access to some data. This vulnerability requires human interaction and primarily affects Java deployments...

PT-2023-35610 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write crash. Technical details about the crash include the functions isvcd start of pic, isvcd parse decod...

BATADV_DAT_START_TIMER Heap Buffer Overflow DoS

The vulnerability of the batadvdatstarttimer function in the distributed-arp-table.c module of the B.A.T.M.A.N. network interface card of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a service failure...

Exploit for Incorrect Comparison in Dynamic-Linq Linq

Dynamic Linq injection to RCE - CVE-2023-32571 About Dynami...

PT-2023-9143 · Unknown +2 · Stb Vorbis.C +2

Name of the Vulnerable Software and Affected Versions: stb vorbis.c version 1.22 Description: A heap-based buffer overflow vulnerability exists in the comment functionality of stb vorbis.c. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file ...

kernel: Linux kernel: Denial of Service in s390/lcs network driver due to incompatible function pointer type

A flaw was found in the Linux kernel's s390/lcs network driver. An incorrect function pointer type in the lcsstartxmit function could lead to a system crash or termination of a process. This issue arises when Kernel Control Flow Integrity kCFI, a security feature designed to prevent certain types...

GNU Binutils Development Environment Buffer Overflow DoS

The vulnerability of the bfdpefscanstartaddress function in the bfd/pef.c component of the GNU Binutils development environment is related to pointer overwriting errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

CVE-2023-47037 Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access)

We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then. Apache Airflow, versions before 2.7.3, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have the...

tang security update

14-2 - Fix service start up 14-1 - New upstream release - v14. Resolves: rhbz2182411 Resolves: CVE-2023-1672...

XRDP auth_start_session DoS

The vulnerability of the authstartsession function on the XRDP server relates to bypassing session restrictions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2023-46764

Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliciously...

Design/Logic Flaw

Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliciously...

CVE-2023-46763

Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously...

CVE-2023-46763: Improper Input Validation

Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously...

CVE-2023-5179

An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to an out-of-bounds read. This can allow attackers to cause a crash, potentially enabling a denial-of-service attack Crash, Exit, or Restart o...