PYSEC-2024-285

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...

PYSEC-2024-282

lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h...

PYSEC-2024-282

lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h...

lunasvg 安全漏洞

LunaSVG is a standalone C SVG rendering library by the individual developer Samuel Ugochukwu. A security vulnerability exists in lunasvg v2.3.9, which stems from a segmentation conflict in the component compositionsolidsource...

lunasvg 安全漏洞

LunaSVG is a standalone C SVG rendering library by the individual developer Samuel Ugochukwu. A security vulnerability exists in lunasvg version v2.3.9, which stems from a buffer overflow vulnerability in lunasvg/source/element.h. The vulnerability is caused by the use of a buffer overflow in...

CVE-2024-33766

lunasvg v2.3.9 was discovered to contain an FPE Floating Point Exception at blendtransformedtiledargb.isra.0...

lunasvg 安全漏洞

LunaSVG is a standalone C SVG rendering library by the individual developer Samuel Ugochukwu. A security vulnerability exists in lunasvg v2.3.9, which stems from a segmentation conflict in the component compositionsolidsourceover...

lunasvg 安全漏洞

LunaSVG is a standalone C SVG rendering library by the individual developer Samuel Ugochukwu. A security vulnerability exists in lunasvg version v2.3.9, which stems from a buffer overflow vulnerability in lunasvg/source/layoutcontext.cpp...

PT-2024-25469 · Lunasvg · Lunasvg

Name of the Vulnerable Software and Affected Versions: lunasvg version 2.3.9 Description: The issue is related to a Floating Point Exception FPE at blend transformed tiled argb.isra.0. This indicates a problem with how the software handles certain mathematical operations, potentially leading to...

PT-2024-25471 · Lunasvg · Lunasvg

Name of the Vulnerable Software and Affected Versions: lunasvg version 2.3.9 Description: The issue is related to a segmentation violation in the component composition solid source over. Recommendations: For lunasvg version 2.3.9, at the moment, there is no information about a newer version that...

CVE-2023-5691

The Chatbot for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version 2.3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject...

WordPress Plugin Chatbot for WordPress Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

WordPress collectchat Plugin <= 2.3.9 is vulnerable to Cross Site Scripting (XSS)

Software collectchat Type Plugin Vulnerable versions = 2.3.9 Fixed in 2.4.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5691 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 37082863c9af Credits Huynh Tien Si Required...

CVE-2020-36759

The Woody code snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.9. This is due to missing or incorrect nonce validation on the runActions function. This makes it possible for unauthenticated attackers to activate and deactivate snippe...

CVE-2020-36759 Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass

The Woody code snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.9. This is due to missing or incorrect nonce validation on the runActions function. This makes it possible for unauthenticated attackers to activate and deactivate snippe...

Memory Allocation with Excessive Size Value

Overview io.undertow:undertow-core is a Java web server based on non-blocking IO. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value due to improper @MultipartConfig annotation handling for very large multipart content. Note: If the server uses...

CVE-2023-30347

Cross Site Scripting XSS vulnerability in Neox Contact Center 2.3.9, via the serachsmsapiname parameter to the SMA API search...

Neox Contact Center 跨站脚本漏洞

Neox Contact Center is a contact center solution from Neox Corporation. A security vulnerability exists in Neox Contact Center version 2.3.9 that originates from a cross-site scripting XSS vulnerability that allows attackers to implement cross-site scripting XSS via the serachsmsapiname parameter...

PT-2022-22926 · Konker · Konker

Name of the Vulnerable Software and Affected Versions: Konker version 2.3.9 Description: The issue is related to a Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For Konker version 2.3.9, at t...

Konker Platform 跨站请求伪造漏洞

Konker Platform is an IoT platform. A security vulnerability exists in Konker Platform version v2.3.9, which can be exploited by an attacker to launch a cross-site request forgery attack...