UBUNTU-CVE-2023-37174

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dumpisomscene function at /mp4box/filedump.c...

SimplePHPscripts FAQ Script PHP 跨站脚本漏洞

SimplePHPscripts FAQ Script PHP is a FAQ system from SimplePHPscripts open source. SimplePHPscripts FAQ Script PHP version 2.3 has a cross-site scripting vulnerability , the vulnerability stems from a problem with the file /preview.php , which can lead to cross-site scripting...

osslsigncode 安全漏洞

osslsigncode is a small tool by Michał Trojnara, a personal developer. It implements part of the functionality of the Microsoft tool signtool.exe. A security vulnerability exists in osslsigncode v.2.3 and earlier versions, which stems from the presence of a buffer overflow vulnerability that coul...

PT-2023-24937 · Aeotec · Aeotec Wallmote Switch

Name of the Vulnerable Software and Affected Versions: Aeotec WallMote Switch version 2.3 Description: A vulnerability in the Aeotec WallMote Switch allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message. Recommendations: For Aeotec WallMote Switch version 2.3, at the...

Security Bulletin: Vulnerability Identified in Cloud Pak System (CVE-2020-4914)

Summary Invalidate session vulnerability identified in IBM Cloud Pak System UI and Rest API at logout. IBM Cloud Pak System has addressed vulnerability. Vulnerability Details CVEID:CVE-2020-4914 DESCRIPTION: IBM Cloud Pak System does not invalidate session after logout which could allow a local...

PT-2023-11536 · Milken · Doyocms

Name of the Vulnerable Software and Affected Versions: Milken DoyoCMS version 2.3 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the background system settings. Recommendations: For Milken DoyoCMS version 2.3, update to a version that includ...

PT-2023-11535 · Milken · Doyocms

Name of the Vulnerable Software and Affected Versions: Milken DoyoCMS version 2.3 Description: A File Upload issue allows a remote attacker to execute arbitrary code via the upload file type parameter. This enables the attacker to potentially gain control over the system. Recommendations: For...

HAProxy 安全漏洞

Haproxy HAProxy is an open source TCP/HTTP load balancing server from the French company Haproxy. The server provides 4-layer and 7-layer proxies and can support tens of thousands of levels of connections with high efficiency and stability. A security vulnerability exists in HAProxy. An attacker...

Spring Vault vulnerable to insertion of sensitive information into a log file

In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token...

WordPress Userlike – WordPress Live Chat plugin Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

Software Userlike – WordPress Live Chat plugin Type Plugin Vulnerable versions = 2.2 Fixed in 2.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23734 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID da66e187f0fd Credits yuyud...

UBUNTU-CVE-2023-1448

A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gfm2tsprocesssdt of the file mediatools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A resource management error vulnerability exists in GPAC version 2.3-DEV-rev35-gbbca86917-master, which stems from the presence of an unknown function in the file filters/loadtext.c, resulting in a buffer overflow...

PT-2023-9308 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev35-gbbca86917-master Description: A vulnerability has been found in the function gf av1 reset state of the file media tools/av parsers.c, which leads to double free. The manipulation can be launched on the local host...

heap-buffer-overflow in function adts_dmx_process filters/reframe_adts.c

Version MP4Box - GPAC version 2.3-DEV-rev44-gbe9f8d395-master c 2000-2023 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Please cite our work in your research: GPAC Filters: https://doi.org/10.1145/3339825.3394929 GPAC: https://doi.org/10.1145/1291233.1291452 GPAC Configuration:...

SUSE CVE-2019-17365

Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable...

heap-buffer-overflow in function gf_m2ts_process_tdt_tot media_tools/mpegts.c

Version ./MP4Box -version MP4Box - GPAC version 2.3-DEV-rev40-g3602a5ded-master c 2000-2023 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Please cite our work in your research: GPAC Filters: https://doi.org/10.1145/3339825.3394929 GPAC: https://doi.org/10.1145/1291233.1291452 GPAC...

CVE-2023-23143

Buffer overflow vulnerability in function avcparseslice in file mediatools/avparsers.c. GPAC version 2.3-DEV-rev1-g4669ba229-master...

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev1-g4669ba229-master, which stems from the discovery of a contained buffer overflow vulnerability via the avcparseslice function in mediatools/avparsers.c...

CVE-2016-15006 enigmaX Scrambling Table main.c getSeed prng seed

A vulnerability, which was classified as problematic, has been found in enigmaX up to 2.2. This issue affects the function getSeed of the file main.c of the component Scrambling Table Handler. The manipulation leads to predictable seed in pseudo-random number generator prng. The attack may be...

PT-2022-22023 · WordPress · Chat Bubble

Name of the Vulnerable Software and Affected Versions: Chat Bubble WordPress plugin versions prior to 2.3 Description: The issue allows unauthenticated attackers to set Stored Cross-Site Scripting payloads in some contact parameters, which will trigger when an admin views the related contact...