std::bad_alloc is mishandled in Precomp 0.4.8. NOTE: this is disputed because it should be categorized as a usability problem.
In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and passw...
AFFECTED_PRODUCTS:
Teslamate Teslamate
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling of backticks to smartSplit.
Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it should be categorized as a usability problem.
An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file.
AFFECTED_PRODUCTS:
Sane-Project Sane Backends
An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed because there is no common libminizinc use case in which an unattended process is supposed to run forever to process a series of atttacker-controlled .mzn files.
Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server.
GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
AFFECTED_PRODUCTS:
Mesa3D Mesa
Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager.
AFFECTED_PRODUCTS:
Xfig Project Xfig
Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
AFFECTED_PRODUCTS:
Mesa3D Mesa
Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
AFFECTED_PRODUCTS:
Mesa3D Mesa
S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().
AFFECTED_PRODUCTS:
Jedsoft S Lang
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().
AFFECTED_PRODUCTS:
Jedsoft S Lang
Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is...
AFFECTED_PRODUCTS:
Mesa3D Mesa
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows.
AFFECTED_PRODUCTS:
Supermicro X11ssm F Firmware,
Supermicro X11sse F Firmware,
Supermicro X11sae F Firmware
A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.
AFFECTED_PRODUCTS:
Supermicro X11ssm F Firmware,
Supermicro X11sse F Firmware,
Supermicro X11sae F Firmware
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
AFFECTED_PRODUCTS:
Supermicro X11ssm F Firmware,
Supermicro X11sse F Firmware,
Supermicro X11sae F Firmware
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
AFFECTED_PRODUCTS:
Supermicro X11ssm F Firmware,
Supermicro X11sse F Firmware,
Supermicro X11sae F Firmware
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
AFFECTED_PRODUCTS:
Supermicro X11ssm F Firmware,
Supermicro X11sse F Firmware,
Supermicro X11sae F Firmware
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
AFFECTED_PRODUCTS:
Supermicro X11ssm F Firmware,
Supermicro X11sse F Firmware,
Supermicro X11sae F Firmware
An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
AFFECTED_PRODUCTS:
Supermicro X11ssm F Firmware,
Supermicro X11sse F Firmware,
Supermicro X11sae F Firmware
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
AFFECTED_PRODUCTS:
GNU Tar
A vulnerability was found in Campcodes Online Examination System 1.0. It has been classified as critical. Affected is an unknown function of the file /adminpanel/admin/facebox_modal/updateExaminee.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack re...
AFFECTED_PRODUCTS:
Campcodes Online Examination System
A vulnerability was found in Campcodes Online Examination System 1.0 and classified as critical. This issue affects some unknown processing of the file /adminpanel/admin/query/deleteCourseExe.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The e...
AFFECTED_PRODUCTS:
Campcodes Online Examination System
A vulnerability has been found in Campcodes Online Examination System 1.0 and classified as critical. This vulnerability affects unknown code of the file /adminpanel/admin/query/deleteExamExe.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The e...
AFFECTED_PRODUCTS:
Campcodes Online Examination System
A vulnerability, which was classified as critical, was found in Campcodes Online Examination System 1.0. This affects an unknown part of the file /adminpanel/admin/query/deleteQuestionExe.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely....
AFFECTED_PRODUCTS:
Campcodes Online Examination System
A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /adminpanel/admin/query/loginExe.php. The manipulation of the argument pass leads to sql injection. The attack may be launche...
AFFECTED_PRODUCTS:
Campcodes Online Examination System
The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Team Member Listing widget. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary f...
AFFECTED_PRODUCTS:
Posimyth The Plus Addons For Elementor
The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Clients widget. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the...
AFFECTED_PRODUCTS:
Posimyth The Plus Addons For Elementor
The Master Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in all versions up to, and including, 2.0.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributo...
AFFECTED_PRODUCTS:
Master-Addons Master Addons
An authenticated malicious client can send a special LINQ query
to execute arbitrary code remotely (RCE) on the SCM server
from List control, and execute the arbitrary code on the same
system where SCMArchivedEventViewerTool is installed in the
case of SCM Tools.
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can restart the device via a /device/reboot GET request.
AFFECTED_PRODUCTS:
Wyrestorm Apollo Vx20 Firmware
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request.
AFFECTED_PRODUCTS:
Wyrestorm Apollo Vx20 Firmware
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only after a valid username is entered, which might make it easier for remote attackers to enumerate user accounts.
AFFECTED_PRODUCTS:
Wyrestorm Apollo Vx20 Firmware
An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.
AFFECTED_PRODUCTS:
Qt Qt,
Qt Qt,
Qt Qt
... (+1)
A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2.
AFFECTED_PRODUCTS:
Rt-Thread Rt Thread
A buffer overflow occurs in utilities/ymodem/ry_sy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character.
AFFECTED_PRODUCTS:
Rt-Thread Rt Thread
A stack buffer overflow occurs in net/at/src/at_server.c in RT-Thread through 5.0.2.
AFFECTED_PRODUCTS:
Rt-Thread Rt Thread
An out-of-bounds access occurs in utilities/var_export/var_export.c in RT-Thread through 5.0.2.
AFFECTED_PRODUCTS:
Rt-Thread Rt Thread
A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2.
AFFECTED_PRODUCTS:
Rt-Thread Rt Thread
A heap buffer overflow occurs in finsh/msh_file.c and finsh/msh.c in RT-Thread through 5.0.2.
AFFECTED_PRODUCTS:
Rt-Thread Rt Thread
RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed + 2531011L; return (seed >> 16) & 0x7FFF;" in calc_random in drivers/misc/rt_random.c.
AFFECTED_PRODUCTS:
Rt-Thread Rt Thread
drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.
AFFECTED_PRODUCTS:
Rt-Thread Rt Thread
A heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.
AFFECTED_PRODUCTS:
Rt-Thread Rt Thread
A heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.
AFFECTED_PRODUCTS:
Rt-Thread Rt Thread
A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could enforce diagnostic texts being displayed as empty strings, if an authorized user uploads a specially crafted stb-language file.
SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server re...
A vulnerability classified as problematic was found in Campcodes Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /adminpanel/admin/facebox_modal/updateCourse.php. The manipulation of the argument id leads to cross site scripting. The attack can b...
AFFECTED_PRODUCTS:
Campcodes Online Examination System