CVE-2023-31973

yasm v1.3.0 was discovered to contain a use after free via the function expandmmacparams at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

PT-2023-23548 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0 Description: The issue is related to a use after free via the function expand mmac params at /nasm/nasm-pp.c. Note that multiple third parties dispute this as a bug and not a vulnerability according to the YASM security...

yasm 安全漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version v1.3.0, which stems from a post-release reuse issue in the function expandmmacparams in /nasm/nasm-pp.c. The vulnerability is caused by the use of the function...

PT-2023-11488 · Nonecms · Nonecms

Name of the Vulnerable Software and Affected Versions: NoneCms version 1.3.0 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the feedback feature. This could potentially lead to unauthorized actions on the web application...

NoneCMS 跨站脚本漏洞

NoneCMS is a content management system CMS based on Thinkphp. A security vulnerability exists in NoneCMS version 1.3.0, which stems from the presence of a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the feedback function...

AZL-35379 CVE-2023-30402 affecting package yasm 1.3.0-17

YASM v1.3.0 was discovered to contain a heap overflow via the function handledotlabel at /nasm/nasm-token.re. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

UBUNTU-CVE-2023-30402

DISPUTED YASM v1.3.0 was discovered to contain a heap overflow via the function handledotlabel at /nasm/nasm-token.re. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code...

PT-2023-22673 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0 Description: A heap overflow issue was discovered in YASM via the handle dot label function at /nasm/nasm-token.re. This issue has been disputed by third parties, arguing it is a bug rather than a security issue because YAS...

CVE-2023-30776 Apache Superset: Database connection password leak

An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue affects Apache Superset version 1.3.0 up to 2.0.1...

PT-2023-12940 · Mybb · Active Threads Plugin

Name of the Vulnerable Software and Affected Versions: Active Threads Plugin version 1.3.0 for MyBB Description: The issue concerns an XSS vulnerability in the date parameter of the activethreads.php file when setting a time period. This allows for potential exploitation. No information is provid...

CVE-2022-28354

In the Active Threads Plugin 1.3.0 for MyBB, the activethreads.php date parameter is vulnerable to XSS when setting a time period...

PT-2023-13500 · Libslic3R +1 · Libslic3R +1

Name of the Vulnerable Software and Affected Versions: libslic3r version 1.3.0 libslic3r Master Commit b1a5500 Description: A heap-based buffer overflow issue exists in the TriangleMesh clone functionality. This can be triggered by a specially-crafted STL file, leading to a heap buffer overflow. ...

PT-2023-13522 · Tp Link · Tp-Link Tapo C310

Name of the Vulnerable Software and Affected Versions: TP-Link Tapo C310 version 1.3.0 Description: The issue allows access to the RTSP video feed using specific credentials, with User as --- and Password as TPL075526460603. Recommendations: For TP-Link Tapo C310 version 1.3.0, consider changing...

AZL-26165 CVE-2023-29580 affecting package yasm 1.3.0-17

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasmexprcreate at /libyasm/expr.c...

CVE-2023-29581

yasm 1.3.0.55.g101bc has a segmentation violation in the function deleteToken at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to ...

WordPress Video Central Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Video Central Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0418 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6114cbd9fcb5 Credits Lana Codes Required...

PT-2023-2446 · Apache · Apache Linkis

Name of the Vulnerable Software and Affected Versions: Apache Linkis versions 1.3.0 through 1.3.1 Description: The issue is related to the lack of effective filtering of parameters in Apache Linkis, which can lead to a deserialization vulnerability. This vulnerability can be triggered by an...

BZip3 安全漏洞

BZip3 is a better, faster and stronger compressor from the individual developer Kamila Szewczyk. A security vulnerability exists in BZip3 versions prior to 1.3.0 that stems from the presence of a denial of service vulnerability...

PT-2023-21311 · Eteran · Eteran Edb-Debugger

Name of the Vulnerable Software and Affected Versions: Eteran edb-debugger version 1.3.0 Description: The issue allows a local attacker to cause a denial of service via the collect symbols function in plugins/BinaryInfo/symbols.cpp. This can lead to a disruption in service. Recommendations: For...

CVE-2022-3685

A vulnerability exists in the SDM600 software. The software operates at a privilege level that is higher than the minimum level required. An attacker who successfully exploits this vulnerability can escalate privileges. This issue affects: All SDM600 versions prior to version 1.3.0. List of CPEs:...