8780 matches found
CVE-2023-29543
An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...
CVE-2023-29543
An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...
CVE-2023-25737
An invalid downcast from nsTextNode to SVGElement could have lead to undefined behavior. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...
Spoofing
The Content-Security-Policy-Report-Only header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...
CVE-2023-2835
The WP Directory Kit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2023-29543
An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...
MicroWorld Technologies eScan Management Console 跨站脚本漏洞
MicroWorld Technologies eScan Management Console is an electronic scanning management console from MicroWorld Technologies, Inc. A security vulnerability exists in MicroWorld Technologies eScan Management Console version 14.0.1400.2281, which stems from the presence of a Reflective Cross Site...
DEBIAN-CVE-2023-34151
A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to sizet in svg, mvg and other coders recurring bugs of CVE-2022-32546...
CVE-2023-34151
A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to sizet in svg, mvg and other coders recurring bugs of CVE-2022-32546...
PT-2023-24199 · Nextcloud · Nextcloud Contacts
Name of the Vulnerable Software and Affected Versions: Nextcloud Contacts app versions prior to 4.2.4 Nextcloud Contacts app versions prior to 5.0.3 Description: The issue concerns the handling of unsanitized SVG files in the Contacts app for Nextcloud. These files are converted into JavaScript...
The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the improper handling of the deletecertvec parameter at the end of the modTMMS process. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
Faculty Evaluation System SQL注入漏洞
Faculty Evaluation System is a faculty evaluation system by Carlo Montero Personal Developer. SourceCodester Faculty Evaluation System version 1.0 suffers from a SQL injection vulnerability that stems from a problem with the file index.php?page=edituser, which can be exploited by an attacker to...
Connect IQ 安全漏洞
Connect IQ CIQ is a technology platform and ecosystem from Garmin Switzerland designed to extend and customize the functionality of its smartwatches and health trackers. A security vulnerability exists in Connect IQ. An attacker exploited the vulnerability to cause a buffer overflow...
CVE-2023-31698
Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting XSS via SVG file on site logo. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content users cannot create their own accounts through self-registration...
Trend Micro Apex Central modTMMS SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of deletecertvec requests to the modTMMS endpoint. When parsing the ...
PT-2023-23419 · Bludit · Bludit
Name of the Vulnerable Software and Affected Versions: Bludit version 3.14.1 Description: The issue is related to Stored Cross Site Scripting XSS via an SVG file on the site logo. It's noted that the product's security model trusts users to insert arbitrary content, as they cannot create their ow...
PT-2025-43103
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc7+ Description The Linux kernel contains a flaw in the s390/crypto component related to ChaCha20. Specifically, the code lacks a check to verify if the necessary vector instructions are available before...
EulerOS 2.0 SP9 : golang (EulerOS-SA-2023-1869)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a...
Wings vulnerable to escape to host from installation container
Impact This vulnerability impacts anyone running the affected versions of Wings. This vulnerability can be used to gain access to the host system running Wings if a user is able to modify an server's install script or the install script executes code supplied by the user either through environmen...
PT-2023-3141 · Rockwell Automation · Armorstart St
Name of the Vulnerable Software and Affected Versions: Rockwell Automation ArmorStart ST affected versions not specified Description: A cross-site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product. This issue could allow a malicious user to view and modify...