Archive
August 2023
Vulnerabilities first published in this month (UTC), newest first.
2,514 results · Feed
-
Unscored —
An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memo…
-
Unscored —
Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta com…
-
Unscored —
Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary…
-
Medium 6.5
Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a…
-
Unscored —
An issue was discovered in function nl80211_send_chandef in rtl8812au v5.6.4.2 allows attackers to cause a denial of se…
-
Unscored —
A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensi…
-
Unscored —
Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset pac…
-
Unscored —CVE-2023-34853 Public exploit
Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow vi…
-
High 7.5
webui-aria2 Path Traversal vulnerability
webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability.
-
Unscored —
Cross-Site Scripting (XSS) vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted pa…
-
Unscored —
Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker …
-
Unscored —
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, …
-
Unscored —
Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service.
-
Unscored —
Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).
-
Unscored —
Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash).
-
Unscored —
An issue in all versions of Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code vi…
-
Unscored —
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, …
-
Unscored —
Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function i…
-
Critical 9.8CVE-2023-36281 Public exploit
langchain vulnerable to arbitrary code execution
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt. This is related to __subclasses__ or a template.
-
Unscored —
An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to retrieve PHP files from th…
-
Unscored —
An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to obtain sensitive database …
-
Unscored —
An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to execute commands.
-
Unscored —
Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: …
-
Unscored —
Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwa…
-
Medium 5.5
An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows…
-
High 7.5
-
Unscored —
A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.
-
Unscored —
A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.
-
Unscored —
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
-
High 7.5
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
-
Unscored —
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
-
Unscored —
An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service …
-
Unscored —
Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denia…
-
Unscored —
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, all…
-
Unscored —
GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance …
-
Unscored —
An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.
-
Unscored —
A reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attacker…
-
Unscored —
In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or lo…
-
Unscored —
Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithClean…
-
Unscored —
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicle…