Skip to content
OpenAdvisories

Archive

6 March 2018

Vulnerabilities first published on this day (UTC), newest first.

58 results · Feed

  • Unscored —

    GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avc_ext.c lines 2417 to …

  • Unscored —

    The management panel in Piwigo 2.9.3 has stored XSS via the virtual_name parameter in a /admin.php?page=cat_list reques…

  • Unscored —

    The management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /admin.php?page=photo-${photo_number} r…

  • Unscored —

    An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of …

  • Unscored —

    An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in …

  • Unscored —

    An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdi…

  • Unscored —

    The management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /ws.php?format=json request. CSRF explo…

  • Unscored —

    NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are c…

  • Unscored —

    NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or pos…

  • Unscored —

    NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does no…

  • Unscored —

    NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary va…

  • Unscored —

    NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past t…

  • Unscored —

    NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosu…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6…

  • High 8.8

    Auth0-js bypasses CSRF checks

    The Auth0 Auth0.js library before 9.3 has CSRF because it mishandles the case where the authorization response lacks the state parameter.

  • Unscored —

    PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Ad…

  • Unscored —

    A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Dele…