Skip to content
OpenAdvisories

Archive

11 August 2023

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.4
    CVE-2023-3824 Public exploit EPSS 22%

    Buffer overflow and overread in phar_dir_read()

    In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.

  • Critical 9.8

    A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to …

  • Critical 9.8

    GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments

    GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.

  • Critical 9.8

    MrSwitch hello.js vulnerable to prototype pollution

    Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.extend function.