OSV-2022-525 Heap-buffer-overflow in spvtools::CFA<spvtools::val::BasicBlock>::CalculateDominators

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48553 Crash type: Heap-buffer-overflow READ 8 Crash state: spvtools::CFA::CalculateDominators spvtools::val::PerformCfgChecks spvtools::val::ValidateBinaryUsingContextAndValidationState...

PT-2021-15743

Name of the Vulnerable Software and Affected Versions: wpDataTables – Tables & Table Charts premium WordPress plugin versions prior to 3.4.2 Description: The issue allows a low privilege authenticated user to tamper with parameters and delete data of other users present in the same table through ...

Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in stackdst crate before 0.6.1 for Rust, which stems from the pushinner behavior, with double free at val.clone.No detailed vulnerability details are provided at...

PT-2020-21896

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including hb realloc impl, hb vector t::alloc, and h...

PT-2020-21894

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several function calls, including hb vector t::resize, hb vector t::push, a...

val-de-loire-41.com Cross Site Scripting vulnerability OBB-1192841

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

lespaniersbioduvaldeloire.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1176321 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Debian: Security Advisory (DLA-2141-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-2141-1 yubikey-val - security update

Bulletin has no description...

[SECURITY] [DLA 2141-1] yubikey-val security update

Package : yubikey-val Version : 2.27-1+deb8u1 CVE ID : CVE-2020-10184 CVE-2020-10185 The following CVEs were reported against yubikey-val. CVE-2020-10184 The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a...

PT-2020-12005

Name of the Vulnerable Software and Affected Versions BWA DiREX-Pro version 1.2181 Description The issue allows full path disclosure via an invalid name array parameter to the "val soft.php3" API endpoint. Recommendations For BWA DiREX-Pro version 1.2181, consider restricting access to the "val...

PT-2020-12004

Name of the Vulnerable Software and Affected Versions BWA DiREX-Pro version 1.2181 Description The issue allows remote attackers to discover passwords via a direct request to "val users.php3". Recommendations For BWA DiREX-Pro version 1.2181, consider restricting access to the "val users.php3"...

CVE-2019-7340

POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filterQueryterms0val' parameter value in the view filter filter.php because proper filtration is omitted...

PT-2019-18545

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Cross Site Scripting XSS issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable filterQueryterms0val parameter value in the "view filter" filter.php because prop...

CVE-2019-7340: Improper Neutralization of Input During Web Page Generation

POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filterQueryterms0val' parameter value in the view filter filter.php because proper filtration is omitted...

CVE-2017-18283

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660...

CVE-2017-18283

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660...

CVE-2017-18283

CVE-2017-18283 describes a memory corruption issue in Qualcomm Snapdragon mobile platform components triggered by Read Val Blob Req with invalid parameters. Affected are Snapdragon variants QCA9379 and SD series: 210/212/205, 625, 835, 845, 850, and SDA660. The vulnerability context in the connec...

CVE-2017-18283: Improper Restriction of Operations within the Bounds of a Memory Buffer

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660...

PT-2018-6800

Name of the Vulnerable Software and Affected Versions: Snapdragon Mobile versions QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660 Description: The issue is related to possible memory corruption when a Read Val Blob Req is received with invalid parameters. Recommendations: Fo...