CVE-2025-27910

tianti v2.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /user/ajax/upd/status. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request...

CVE-2024-46486

TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution RCE vulnerability via the httpProcDataSrv function...

CVE-2024-46486

TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution RCE vulnerability via the httpProcDataSrv function...

CVE-2024-46486

TP-LINK TL-WDR5620 v2.3 is affected by a remote code execution (RCE) vulnerability in the httpProcDataSrv function. The issue stems from insufficient input handling in httpProcDataSrv, allowing an attacker to craft inputs that trigger arbitrary code execution. Impact is remote attacker access wit...

RHSA-2009:1067 Red Hat Security Advisory: Red Hat Application Stack v2.3 security and enhancement update

Bulletin has no description...

CVE-2024-36897 drm/amd/display: Atom Integrated System Info v2_2 for DCN35

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 New request from KMD/VBIOS in order to support new UMA carveout model. This fixes a null dereference from accessing Ctx-dcbios-integratedinfo while it was NULL. DAL parse...

Intel® MAS Software Advisory

Summary: Potential security vulnerabilities in some Intel® Memory and Storage Tool MAS software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-36490 Description: Improp...

Cross site scripting

A stored cross-site scripting XSS vulnerability in /install.php?m=install&c=index&a=step3 of GreenCMS v2.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-22570

A stored cross-site scripting XSS vulnerability in /install.php?m=install&c=index&a=step3 of GreenCMS v2.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-22570

A stored cross-site scripting XSS vulnerability in /install.php?m=install&c=index&a=step3 of GreenCMS v2.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-22749

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

Buffer overflow

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

CVE-2024-22749

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

CVE-2024-22749

GPAC v2.3 is affected by a buffer overflow in the isomedia/isom_write.c:4577 path via gf_isom_new_generic_sample_description. The CVE entry describes a local impact with high severity (CVSS 3.1: HIGH). Public references in the connected documents confirm the presence of the vulnerability in GPAC ...

CVE-2024-22749

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

CVE-2023-48013

GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gffilterpacketdel function at /gpac/src/filtercore/filter.c...

CVE-2023-47384

MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gfisomaddchapter at /isomedia/isomwrite.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

Open redirect

An open redirect vulnerability in the sanitizeurl parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL...

Design/Logic Flaw

Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV...

CVE-2023-37174

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dumpisomscene function at /mp4box/filedump.c...