Archive
5 September 2023
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Low 3.5
Open redirect in change password functionality in Cacti
Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, users with console access can be redirected to an arbitrary website after a change password performed via a specifically crafted URL. The `auth_changepassword.php`…
-
Low 3.1
An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open A…
-
Low 3.1
An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automat…
-
Low —CVE-2023-36308 Public exploit
Crash when processing crafted TIFF files
disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this …