TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg
AFFECTED_PRODUCTS:
Totolink A3700r Firmware
A stored cross-site scripting (XSS) vulnerability exists in Apache Superset before 3.0.3. An authenticated attacker with create/update permissions on charts or dashboards could store a script or add a specific HTML snippet that would act as a stored XSS.
For 2.X versions, users should change their...
AFFECTED_PRODUCTS:
Apache Superset
Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 122, Firefox ESR < 1...
AFFECTED_PRODUCTS:
Mozilla Firefox,
Debian Debian Linux,
Mozilla Thunderbird
... (+1)
Some WASM source files could have caused a crash when loaded in devtools. This vulnerability affects Firefox < 122.
AFFECTED_PRODUCTS:
Mozilla Firefox
In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
AFFECTED_PRODUCTS:
Mozilla Firefox,
Debian Debian Linux,
Mozilla Thunderbird
... (+1)
A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an exploitable crash. This vulnerability affects Firefox < 122.
AFFECTED_PRODUCTS:
Mozilla Firefox
A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
AFFECTED_PRODUCTS:
Mozilla Firefox,
Debian Debian Linux,
Mozilla Thunderbird
... (+1)
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
AFFECTED_PRODUCTS:
Mozilla Firefox,
Debian Debian Linux,
Mozilla Thunderbird
... (+1)
A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar. This vulnerability affects Firefox < 122 and Thunderbird < 115.7.
AFFECTED_PRODUCTS:
Mozilla Firefox,
Debian Debian Linux,
Mozilla Thunderbird
... (+1)
A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox < 122.
AFFECTED_PRODUCTS:
Mozilla Firefox
When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
AFFECTED_PRODUCTS:
Mozilla Firefox,
Debian Debian Linux,
Mozilla Thunderbird
... (+1)
A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
AFFECTED_PRODUCTS:
Mozilla Firefox,
Debian Debian Linux,
Mozilla Thunderbird
... (+1)
The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 122.
AFFECTED_PRODUCTS:
Mozilla Firefox
In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploitable crash. This vulnerability affects Firefox < 122.
AFFECTED_PRODUCTS:
Mozilla Firefox
An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.9, and Thunderbird < 115.9.
AFFECTED_PRODUCTS:
Mozilla Firefox
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
AFFECTED_PRODUCTS:
Mozilla Firefox,
Debian Debian Linux,
Mozilla Thunderbird
... (+1)
An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
AFFECTED_PRODUCTS:
Mozilla Firefox,
Debian Debian Linux,
Mozilla Thunderbird
... (+1)
Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch prior to 1.13.19 and on the 2.x branch prior to 2.1.8, users who don't have edit or delete permissions for records exposed in a `ModelAdmin` can still edit or delete records using t...
AFFECTED_PRODUCTS:
Silverstripe Admin,
Silverstripe Admin
Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to versions 4.13.39 and 5.1.11, if a user should not be able to see a record, but that record can be added to a `GridField` using the `GridFieldAddExistingAutocompleter` component, the re...
AFFECTED_PRODUCTS:
Silverstripe Framework,
Silverstripe Framework
The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations. In versions 4.0.0 prior to 4.3.7 and 5.0.0 prior to 5.1.3, `canView` permission checks are bypassed for ORM data in paginated GraphQL query results where the total number of records is greater than the number of...
AFFECTED_PRODUCTS:
Silverstripe Graphql,
Silverstripe Graphql
An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled.
AFFECTED_PRODUCTS:
Linux Linux Kernel,
Linux Linux Kernel
MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface.
AFFECTED_PRODUCTS:
Myq-Solution Print Server,
Myq-Solution Print Server
The Sticky Buttons – floating buttons builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via sticky URLs in all versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrat...
AFFECTED_PRODUCTS:
Wow-Company Sticky Buttons
In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.
AFFECTED_PRODUCTS:
Linux Linux Kernel
In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.
AFFECTED_PRODUCTS:
Linux Linux Kernel
Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated...
AFFECTED_PRODUCTS:
Appleple A Blog Cms,
Appleple A Blog Cms,
Appleple A Blog Cms
... (+2)
Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated atta...
AFFECTED_PRODUCTS:
Appleple A Blog Cms,
Appleple A Blog Cms,
Appleple A Blog Cms
... (+2)
Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated a...
AFFECTED_PRODUCTS:
Appleple A Blog Cms,
Appleple A Blog Cms,
Appleple A Blog Cms
... (+2)
Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote unauthenticated at...
AFFECTED_PRODUCTS:
Appleple A Blog Cms,
Appleple A Blog Cms,
Appleple A Blog Cms
... (+2)
Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated...
AFFECTED_PRODUCTS:
Appleple A Blog Cms,
Appleple A Blog Cms,
Appleple A Blog Cms
... (+2)
In the Linux kernel before 6.5.9, there is a NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c.
AFFECTED_PRODUCTS:
Linux Linux Kernel
copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel->data_size check. This is related to ctl_ioctl.
AFFECTED_PRODUCTS:
Linux Linux Kernel
In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation.
AFFECTED_PRODUCTS:
Linux Linux Kernel
In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access.
AFFECTED_PRODUCTS:
Linux Linux Kernel
In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.
AFFECTED_PRODUCTS:
Linux Linux Kernel
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'disqus_name' parameter in all versions up to, and including, 1.0.92.1 due to insufficient input sanitization and output escaping on the executed JS file. This makes it possible for...
AFFECTED_PRODUCTS:
Ampforwp Accelerated Mobile Pages
Improper Input Validation in Hitron Systems DVR LGUVR-16H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
AFFECTED_PRODUCTS:
Hitron Systems Dvr Hvr 4781 Firmware
Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
AFFECTED_PRODUCTS:
Hitron Systems Dvr Hvr 4781 Firmware
Improper Input Validation in Hitron Systems DVR LGUVR-4H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
AFFECTED_PRODUCTS:
Hitron Systems Dvr Hvr 4781 Firmware
Improper Input Validation in Hitron Systems DVR HVR-16781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
AFFECTED_PRODUCTS:
Hitron Systems Dvr Hvr 4781 Firmware
Improper Input Validation in Hitron Systems DVR HVR-8781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
AFFECTED_PRODUCTS:
Hitron Systems Dvr Hvr 4781 Firmware
Improper Input Validation in Hitron Systems DVR HVR-4781 1.03~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.
AFFECTED_PRODUCTS:
Hitron Systems Dvr Hvr 4781 Firmware
An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol.
AFFECTED_PRODUCTS:
Linux Linux Kernel,
Linux Linux Kernel,
Linux Linux Kernel
... (+4)
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.3, macOS Ventura 13.6.4. An app may be able to access sensitive user data.
AFFECTED_PRODUCTS:
Apple macOS,
Apple macOS
A privacy issue was addressed with improved handling of files. This issue is fixed in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. An app may be able to access sensitive user data.
AFFECTED_PRODUCTS:
Apple macOS,
Apple Iphone Os,
Apple Tvos
... (+2)
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited.
AFFECTED_PRODUCTS:
Apple macOS,
Apple macOS,
Apple macOS
... (+5)
The issue was addressed with improved authentication. This issue is fixed in iOS 17.3 and iPadOS 17.3. Stolen Device Protection may be unexpectedly disabled.
AFFECTED_PRODUCTS:
Apple Iphone Os,
Apple Ipados
A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions. This issue is fixed in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the p...
AFFECTED_PRODUCTS:
Apple macOS,
Apple Iphone Os,
Apple Tvos
... (+2)
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14.3, watchOS 10.3, iOS 17.3 and iPadOS 17.3. An app may be able to bypass certain Privacy preferences.
AFFECTED_PRODUCTS:
Apple macOS,
Apple Iphone Os,
Apple Watchos
... (+1)
An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. An app may be able to access user-sensitive data.
AFFECTED_PRODUCTS:
Apple macOS,
Apple Iphone Os,
Apple Tvos
... (+2)