Archive
6 March 2018
Vulnerabilities first published on this day (UTC), newest first.
58 results · Feed
-
Unscored —
GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avc_ext.c lines 2417 to …
-
Unscored —
The management panel in Piwigo 2.9.3 has stored XSS via the virtual_name parameter in a /admin.php?page=cat_list reques…
-
Unscored —
The management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /admin.php?page=photo-${photo_number} r…
-
Unscored —
An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of …
-
Unscored —
An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in …
-
Unscored —
An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdi…
-
Unscored —
The management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /ws.php?format=json request. CSRF explo…
-
Unscored —
NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are c…
-
Unscored —
NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or pos…
-
Unscored —
NVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG) where the DRBG does no…
-
Unscored —
NVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to write an arbitrary va…
-
Unscored —
NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past t…
-
Unscored —
NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6…
-
High 8.8
Auth0-js bypasses CSRF checks
The Auth0 Auth0.js library before 9.3 has CSRF because it mishandles the case where the authorization response lacks the state parameter.
-
Unscored —
PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Ad…
-
Unscored —
A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Dele…