Archive
22 August 2023
Vulnerabilities first published on this day (UTC), newest first.
191 results · Feed
-
Unscored —
Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwa…
-
Medium 5.5
An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows…
-
High 7.5
-
Unscored —
A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.
-
Unscored —
A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.
-
Unscored —
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
-
High 7.5
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
-
Unscored —
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
-
Unscored —
An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service …
-
Unscored —
Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denia…
-
Unscored —
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, all…
-
Unscored —
GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance …
-
Unscored —
An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.
-
Unscored —
A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attacker…
-
Unscored —
In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or lo…
-
Unscored —
Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithClean…
-
Unscored —
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicle…
-
Unscored —
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_d…
-
Unscored —
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
-
Unscored —
In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the…
-
Unscored —
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "id…
-
Unscored —
memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.
-
Unscored —CVE-2022-48565 Public exploit
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity…
-
Unscored —
An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations…
-
Unscored —
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_…
-
Unscored —
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion whe…
-
Unscored —
File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open So…
-
Medium 6.1
Horizon Web Dashboard Open Redirect vulnerability
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
-
Unscored —
An issue was discovered in Fresenius Kabi PharmaHelp 5.1.759.0 allows attackers to gain escalated privileges via via ca…
-
Unscored —
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.
-
Unscored —
An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of servic…
-
Unscored —
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.
-
Unscored —CVE-2022-44215 Public exploit
There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL.
-
High 7.5
json2xml Uncaught Exception vulnerability
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service.
-
Unscored —
Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php.
-
Unscored —
A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failu…
-
Unscored —
An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the mai…
-
Medium 6.5
In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes …
-
Unscored —
Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.
-
Unscored —
Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.…