Skip to content
OpenAdvisories

Archive

17 June 2024

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Low 2.4

    PHPVibe Global Options Page functionalities.global.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown processing of the file functionalities.global.php of the component Global Options Page. The manipulation of the argument site-logo-text le…

  • Low 3.3

    GPAC MP4Box dmx_m2ts.c m2tsdmx_on_event null pointer dereference

    A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmx_on_event of the file src/filters/dmx_m2ts.c of the component MP4Box. The manipulation leads to null pointer dereferenc…

  • Low 3.3

    GPAC MP4Box load_text.c swf_svg_add_iso_sample null pointer dereference

    A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue is the function swf_svg_add_iso_sample of the file src/filters/load_text.c of the component MP4Box. The manipulation leads to null pointer…

  • Low 3.3

    GPAC MP4Box isoffin_read.c isoffin_process infinite loop

    A vulnerability has been found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this vulnerability is the function isoffin_process of the file src/filters/isoffin_read.c of the component MP4Box. The manipulation leads to inf…

  • Low 2.4

    Ingenico Estate Manager News Feed messages cross site scripting

    A vulnerability, which was classified as problematic, has been found in Ingenico Estate Manager 2023. This issue affects some unknown processing of the file /emgui/rest/ums/messages of the component News Feed. The manipulation of the argument message leads to…

  • Low 3.5

    LabVantage LIMS cross site scripting

    A vulnerability classified as problematic has been found in LabVantage LIMS 2017. This affects an unknown part of the file /labvantage/rc?command=page&page=SampleHistoricalList&_iframename=list&__crc=crc_1701669816260. The manipulation of the argument height/…

  • Low 3.7

    nasirkhan Laravel Starter Password Reset forgot-password observable response discrepancy

    A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument …

  • Low 3.5

    Evmos is missing create validator check

    Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vulnerability is fixed in 18.0.0.

  • Low 3.5

    Evmos is missing precompile checks

    Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Preliminary checks on actions computed by the clawback vesting accounts are performed in the ante handler. Evmos core, implements two different ante handlers: one for Cosmos transactions a…