6 matches found
PT-2026-41629
A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit has been released to the public and ma...
PT-2025-33501 · Drupal · Drupal Layout Builder Advanced Permissions
Name of the Vulnerable Software and Affected Versions: Drupal Layout Builder Advanced Permissions versions 0.0.0 through 2.1.9 Description: Missing authorization allows forceful browsing in Drupal Layout Builder Advanced Permissions. Recommendations: Update to version 2.2.0 or later...
PT-2025-18134 · Unknown · Libsnowflakeclient
Name of the Vulnerable Software and Affected Versions: libsnowflakeclient versions 0.5.0 through 2.2.0 Description: The issue concerns the Snowflake Connector for C/C++, which incorrectly treats malformed requests that cause the HTTP response status code 400 as able to be retried. This could hang...
PT-2025-6638
Name of the Vulnerable Software and Affected Versions IntelR QuickAssist Technology versions prior to 2.2.0 Description The issue is related to an out-of-bounds write that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations For versions...
PT-2023-16290 · Hashicorp +1 · Go-Getter +1
Name of the Vulnerable Software and Affected Versions: HashiCorp go-getter versions 1.6.2 and earlier, 2.1.1 and earlier Description: The issue concerns decompression bombs, which can lead to excessive memory consumption and denial-of-service attacks. Recommendations: For versions 1.6.2 and...
PT-2017-6404 · Inverse · Sogo
Name of the Vulnerable Software and Affected Versions: SOGo versions prior to 2.2.0 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the Web Calendar component of SOGo. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via...