PT-2023-27784 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.174 Description: An issue exists in the DashboardsController.php file, specifically a reflected XSS issue via the id parameter when editing a dashboard. Recommendations: For MISP version 2.4.174, consider disabling the id...

PT-2023-11507 · Nasm +2 · Nasm +2

Name of the Vulnerable Software and Affected Versions: nasm version 2.14.02 Description: A Use After Free issue in the new Token function in asm/preproc.c allows attackers to cause a denial of service via a crafted nasm command. Recommendations: For nasm version 2.14.02, consider disabling the ne...

nasm 缓冲区错误漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in nasm version 2.16, which stems from a stack-based buffer over-reading issue in disasm...

nasm 缓冲区错误漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in nasm version 2.16, which stems from a stack-based buffer over-reading issue in disasm functions...

McAfee Safe Connect 代码问题漏洞

McAfee Safe Connect is a virtual private network VPN product from McAfee, Inc. A security vulnerability exists in McAfee Safe Connect versions prior to 2.16.1.126, which originated from a vulnerability that could allow an attacker with system privileges to escalate privileges by loading an...

NTSC-CRT 输入验证错误漏洞

NTSC-CRT is an NTSC encode/decode in C89 by the LMP88959 individual developer. A security vulnerability exists in NTSC-CRT version 2.2.1 that stems from the presence of an integer overflow and out-of-bounds writes...

CVE-2023-4204

NPort IAW5000A-I/O Series firmware version v2.2 and prior is affected by a hardcoded credential vulnerabilitywhich poses a potential risk to the security and integrity of the affected device. This vulnerability is attributed to the presence of a hardcoded key, which could potentially facilitate...

Faad2 Buffer Error Vulnerability

Faad2 is a freeware Advanced Audio Aac decoder. It is used for Sbr decoding. A security vulnerability exists in Faad2 version v.2.10.1, which stems from the presence of a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code and cause a denial of service...

CVE-2023-28535

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paytm Paytm Payment Donation plugin = 2.2.0 versions...

CVE-2022-29887

Cross-site Scripting XSS in some IntelR Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Intel AI Hackathon Code Issues Vulnerabilities

Intel AI Hackathon is the AI Hackathon repository from Intel Corporation USA, which contains notebooks and tutorials referenced at Intel AI Hackathon events. A security vulnerability exists in versions prior to Intel AI Hackathon 2.0.0. An attacker exploiting the vulnerability could elevate...

eProsima Fast DDS Security Vulnerability

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. A security vulnerability exists in eProsima Fast DDS versions prior to v2.10.0, which stems from BadParamExceptionFast CDR throws an exception that is not caught by Fast...

eProsima Fast DDS Security Vulnerability

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. A security vulnerability exists in eProsima Fast DDS version 2.9.1, which stems from a data sub-message sent to a PDP port that raises an unhandled BadParamException in...

CVE-2023-40224

MISP 2.4.174 allows XSS in app/View/Events/index.ctp...

CVE-2023-37388

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Sudipto Pratap Mahato Simple Light Weight Social Share plugin = 2.0 versions...

CVE-2023-37734

EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow...

CVE-2023-38245 Adobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) src NTLMv2 SSO Hash Theft Vulnerability

Adobe Acrobat Reader versions 23.003.20244 and earlier and 20.005.30467 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a...

EZ SoftMagic MP3 Audio Converter Security Vulnerability

EZ SoftMagic MP3 Audio Converter is an MP3 audio editor from EZ SoftMagic. A security vulnerability exists in EZ SoftMagic MP3 Audio Converter version 2.7.3.700, which originated from a vulnerability that could allow an attacker to execute arbitrary code or crash the application by overflowing th...

MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. MISP version 2.4174 suffers from a cross-site scripting vulnerability that stems from the...

PT-2023-25940 · WordPress · Sudipto Pratap Mahato Simple Light Weight Social Share

Name of the Vulnerable Software and Affected Versions: Sudipto Pratap Mahato Simple Light Weight Social Share plugin versions = 2.0 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject...