Archive
August 2023
Vulnerabilities first published in this month (UTC), newest first.
2,514 results · Feed
-
Unscored —
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_d…
-
Unscored —
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
-
Unscored —
In Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the…
-
Unscored —
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "id…
-
Unscored —
memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.
-
Unscored —CVE-2022-48565 Public exploit
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity…
-
Unscored —
An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations…
-
Unscored —
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_…
-
Unscored —
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion whe…
-
Unscored —
File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open So…
-
Medium 6.1
Horizon Web Dashboard Open Redirect vulnerability
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
-
Unscored —
An issue was discovered in Fresenius Kabi PharmaHelp 5.1.759.0 allows attackers to gain escalated privileges via via ca…
-
Unscored —
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.
-
Unscored —
An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of servic…
-
Unscored —
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.
-
Unscored —CVE-2022-44215 Public exploit
There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL.
-
High 7.5
json2xml Uncaught Exception vulnerability
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service.
-
Unscored —
Cross Site Scripting (XSS) vulnerability in Cacti 1.2.21 via crafted POST request to graphs_new.php.
-
Unscored —
A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failu…
-
Unscored —
An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the mai…
-
Medium 6.5
In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes …
-
Unscored —
Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.
-
Unscored —
Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.…
-
Unscored —
Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-…
-
Unscored —
An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a de…
-
Unscored —
An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause …
-
Unscored —
An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attacke…
-
Unscored —
An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads…
-
Unscored —
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive:…
-
Unscored —
An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecifi…
-
Unscored —
An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to ca…
-
Unscored —
An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecifi…
-
Unscored —
An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impa…
-
Unscored —
Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs.
-
Unscored —
dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-20…
-
Unscored —
dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y
-
Unscored —
An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges v…
-
Unscored —
An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overf…
-
High 7.5
dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.
-
Unscored —
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.