3669 matches found
CVE-2020-36131: Out-of-bounds Write
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
CVE-2020-36131
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
CVE-2020-36131
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
CVE-2020-36131
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
CVE-2021-42364
The Stetic WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the statspage function found in the /stetic.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 1.0.6...
PT-2021-23596
Name of the Vulnerable Software and Affected Versions Stetic WordPress plugin versions up to, and including 1.0.6 Description The issue is related to Cross-Site Request Forgery due to missing nonce validation via the stats page function found in the /stetic.php file. This allowed attackers to...
OESA-2021-1437 trafficserver security update
Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. Security Fixes: Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server...
Apache Traffic Server Plugin DoS
The vulnerability of the stats-over-http plugin in the Apache Traffic Server web server is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow a malicious actor to cause service interruptions remotely...
libvirt: segmentation fault during VM shutdown can lead to vdsm hang
A use-after-free flaw was found in libvirt. The qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down...
Out-of-Bounds Write
trafficserver is vulnerable to out-of-bounds write. The vulnerability exists due to a lack of sanitization of size of input in the stats-over-http plugin...
PT-2021-16201
Name of the Vulnerable Software and Affected Versions Simple Download Monitor WordPress plugin versions prior to 3.9.5 Description The issue arises from the failure to escape certain parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues. The...
CVE-2021-43082
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...
DEBIAN-CVE-2021-43082
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...
CVE-2021-43082
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...
Buffer overflow
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...
CVE-2021-43082
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...
UBUNTU-CVE-2021-43082
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...
CVE-2021-43082
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...
CVE-2021-43082
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...
CVE-2021-43082: Buffer Copy without Checking Size of Input
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...