7450 matches found
GHSA-3MWG-GP5G-FV3Q feedparser Cross-site Scripting vulnerability
Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas...
feedparser Cross-site Scripting vulnerability
Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas...
Fedora: Security Advisory for usd (FEDORA-2022-61f6ee6353)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: usd-21.11-11.fc35
Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...
The vulnerability of the `mcba_usb_start_xmit` function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of mcbausbstartxmit in the Linux kernel’s drivers/net/can/usb/mcbausb.c file is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information from a remote location...
USN-5385-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, inux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon vulnerabilities
Brendan Dolan-Gavitt discovered that the aQuantia AQtion Ethernet device driver in the Linux kernel did not properly validate meta-data coming from the device. A local attacker who can control an emulated device can use this to cause a denial of service system crash or possibly execute arbitrary...
Vulnerabilities fixed in Oracle Financial Services Applications
Oracle has fixed vulnerabilities in the following Financial Services applications: - Oracle Banking Deposits and Lines of Credit Servicing - Oracle Banking Enterprise Default Management - Oracle Banking Loans Servicing - Oracle Banking Party Management - Oracle Banking Payments - Oracle Banking...
CVE-2022-21472
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...
Design/Logic Flaw
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2022-21472
CVE-2022-21472 affects Oracle FLEXCUBE Universal Banking (Infrastructure component). Affected versions: 12.4, 14.0–14.3, and 14.5. The vulnerability is exploitable by a low-privileged attacker over HTTP with network access, requiring user interaction. Impact includes unauthorized creation/modific...
Oracle Financial Services Applications 输入验证错误漏洞
Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and property management. An input validation error vulnerability exists in Oracle Financial Services Applications that could allow a low-privileged...
SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33125)
SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. SAP 3D Visual Enterprise Viewer is vulnerable to ...
CVE-2022-27655
When a user opens a manipulated Universal 3D .u3d, 3difr.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...
Design/Logic Flaw
When a user opens a manipulated Universal 3D .u3d, 3difr.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...
CVE-2022-27655
CVE-2022-27655 describes a vulnerability in SAP 3D Visual Enterprise Viewer (version 9.0) where parsing manipulated Universal 3D (U3D, 3difr.x3d) files from untrusted sources can crash the application and, per related advisories, may allow remote code execution via U3D parsing. The connected ZDI ...
CVE-2022-27655
When a user opens a manipulated Universal 3D .u3d, 3difr.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...
SAP 3D Visual Enterprise Viewer 输入验证错误漏洞
SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. SAP 3D Visual Enterprise Viewer is vulnerable to ...
CVE-2022-28779
Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...
多款 MediaTek 产品输入验证错误漏洞
MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in multiple MediaTek products that originates from an integer overflow in the preloader usb, which may result in out-of-bounds writes...
