🚨 CVE-2014-125019
A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_nal_unit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_nal_unit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
Vuldb
CVE-2014-125019: FFmpeg Slice Segment decode_nal_unit memory corruption (XFDB-91077 / SA56838)
A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This vulnerability is uniquely identified as CVE-2014-125019. It is recommended to apply a patch to fix this issue.
🚨 CVE-2014-125022
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shorten_decode_frame of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shorten_decode_frame of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
Vuldb
CVE-2014-125022: FFmpeg Bitstream Buffer shorten_decode_frame memory corruption (XFDB-91080 / SA56838)
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. This vulnerability is traded as CVE-2014-125022. It is recommended to apply a patch to fix this issue.
🚨 CVE-2014-125021
A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmv_process_header. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmv_process_header. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
🚨 CVE-2014-125023
A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function truemotion1_decode_header of the component Truemotion1 Handler. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function truemotion1_decode_header of the component Truemotion1 Handler. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.
🎖@cveNotify
🚨 CVE-2018-25041
A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
🎖@cveNotify
A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
🎖@cveNotify
Vuldb
CVE-2018-25041 | uTorrent JSON RPC Server privileges management (EDB-44151)
A vulnerability was found in uTorrent. It has been rated as critical. This vulnerability is handled as CVE-2018-25041. It is recommended to upgrade the affected component.
🚨 CVE-2021-45026
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).
🎖@cveNotify
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).
🎖@cveNotify
Rocketsoftware
Modernization Without Disruption | IT Modernization Services | Rocket Software
Rocket Software provides comprehensive IT modernization services. We meet you wherever you are in your modernization journey with effective solutions that address IT challenges.
🚨 CVE-2022-31034
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an SSO login is initiated from the Argo CD CLI or UI. The vulnerabilities are due to the use of insufficiently random values in parameters in Oauth2/OIDC login flows. In each case, using a relatively-predictable (time-based) seed in a non-cryptographically-secure pseudo-random number generator made the parameter less random than required by the relevant spec or by general best practices. In some cases, using too short a value made the entropy even less sufficient. The attacks on login flows which are meant to be mitigated by these parameters are difficult to accomplish but can have a high impact potentially granting an attacker admin access to Argo CD. Patches for this vulnerability has been released in the following Argo CD versions: v2.4.1, v2.3.5, v2.2.10 and v2.1.16. There are no known workarounds for this vulnerability.
🎖@cveNotify
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an SSO login is initiated from the Argo CD CLI or UI. The vulnerabilities are due to the use of insufficiently random values in parameters in Oauth2/OIDC login flows. In each case, using a relatively-predictable (time-based) seed in a non-cryptographically-secure pseudo-random number generator made the parameter less random than required by the relevant spec or by general best practices. In some cases, using too short a value made the entropy even less sufficient. The attacks on login flows which are meant to be mitigated by these parameters are difficult to accomplish but can have a high impact potentially granting an attacker admin access to Argo CD. Patches for this vulnerability has been released in the following Argo CD versions: v2.4.1, v2.3.5, v2.2.10 and v2.1.16. There are no known workarounds for this vulnerability.
🎖@cveNotify
GitHub
Merge pull request from GHSA-2m7h-86qq-fp4v · argoproj/argo-cd@17f7f4f
Signed-off-by: Michael Crenshaw <michael@crenshaw.dev>
fix references
Signed-off-by: Michael Crenshaw <michael@crenshaw.dev>
use long enough state param for oauth2
S...
fix references
Signed-off-by: Michael Crenshaw <michael@crenshaw.dev>
use long enough state param for oauth2
S...
🚨 CVE-2022-28168
In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to access log files to easily decode the passwords.
🎖@cveNotify
In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to access log files to easily decode the passwords.
🎖@cveNotify
🚨 CVE-2022-28167
Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password in plain text in asyncjobscheduler-manager.log
🎖@cveNotify
Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password in plain text in asyncjobscheduler-manager.log
🎖@cveNotify
Broadcom
BSA-2022-1978
🚨 CVE-2022-28166
In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers (ssl-static-key-ciphers) on ports 443 & 18082.
🎖@cveNotify
In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers (ssl-static-key-ciphers) on ports 443 & 18082.
🎖@cveNotify
Broadcom
BSA-2022-1977
🚨 CVE-2022-31065
BigBlueButton is an open source web conferencing system. In affected versions an attacker can embed malicious JS in their username and have it executed on the victim's client. When a user receives a private chat from the attacker (whose username contains malicious JavaScript), the script gets executed. Additionally when the victim receives a notification that the attacker has left the session. This issue has been patched in version 2.4.8 and 2.5.0. There are no known workarounds for this issue.
🎖@cveNotify
BigBlueButton is an open source web conferencing system. In affected versions an attacker can embed malicious JS in their username and have it executed on the victim's client. When a user receives a private chat from the attacker (whose username contains malicious JavaScript), the script gets executed. Additionally when the victim receives a notification that the attacker has left the session. This issue has been patched in version 2.4.8 and 2.5.0. There are no known workarounds for this issue.
🎖@cveNotify
GitHub
GitHub is where people build software. More than 83 million people use GitHub to discover, fork, and contribute to over 200 million projects.
🚨 CVE-2022-31057
Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue.
🎖@cveNotify
Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue.
🎖@cveNotify
Shopware
Shopware 5 - Security Updates - Security Update 06/2022
Next to the usual bug fixes and optimisations, we have also been able to close a vulnerability at the „moderate“ threat level. Affected are the Shopware versions from 5.0.0. to 5.7.11.
🚨 CVE-2022-31076
KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message can crash CloudCore by triggering a nil-pointer dereference in the UDS Server. Since the UDS Server only communicates with the CSI Driver on the cloud side, the attack is limited to the local host network. As such, an attacker would already need to be an authenticated user of the Cloud. Additionally it will be affected only when users turn on the unixsocket switch in the config file cloudcore.yaml. This bug has been fixed in Kubeedge 1.11.0, 1.10.1, and 1.9.3. Users should update to these versions to resolve the issue. Users unable to upgrade should sisable the unixsocket switch of CloudHub in the config file cloudcore.yaml.
🎖@cveNotify
KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message can crash CloudCore by triggering a nil-pointer dereference in the UDS Server. Since the UDS Server only communicates with the CSI Driver on the cloud side, the attack is limited to the local host network. As such, an attacker would already need to be an authenticated user of the Cloud. Additionally it will be affected only when users turn on the unixsocket switch in the config file cloudcore.yaml. This bug has been fixed in Kubeedge 1.11.0, 1.10.1, and 1.9.3. Users should update to these versions to resolve the issue. Users unable to upgrade should sisable the unixsocket switch of CloudHub in the config file cloudcore.yaml.
🎖@cveNotify
GitHub
fix fuzzer extract message error by vincentgoat · Pull Request #3899 · kubeedge/kubeedge
Signed-off-by: vincentgoat linguohui1@huawei.com
What type of PR is this?
/kind bug
What this PR does / why we need it:
To address the oss-fuzz issue
cc @AdamKorcz
Which issue(s) this PR fixes:
...
What type of PR is this?
/kind bug
What this PR does / why we need it:
To address the oss-fuzz issue
cc @AdamKorcz
Which issue(s) this PR fixes:
...
🚨 CVE-2022-31064
BigBlueButton is an open source web conferencing system. Users in meetings with private chat enabled are vulnerable to a cross site scripting attack in affected versions. The attack occurs when the attacker (with xss in the name) starts a chat. in the victim's client the JavaScript will be executed. This issue has been addressed in version 2.4.8 and 2.5.0. There are no known workarounds for this issue.
🎖@cveNotify
BigBlueButton is an open source web conferencing system. Users in meetings with private chat enabled are vulnerable to a cross site scripting attack in affected versions. The attack occurs when the attacker (with xss in the name) starts a chat. in the victim's client the JavaScript will be executed. This issue has been addressed in version 2.4.8 and 2.5.0. There are no known workarounds for this issue.
🎖@cveNotify
Pentests
Stored Cross-Site Scripting (XSS) in BigBlueButton
Pentests.nl has discovered a vulnerability in BigBlueButton which could be exploited to perform stored Cross-Site Scripting (XSS) attacks.
🚨 CVE-2022-31036
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v1.3.0 are vulnerable to a symlink following bug allowing a malicious user with repository write access to leak sensitive YAML files from Argo CD's repo-server. A malicious Argo CD user with write access for a repository which is (or may be) used in a Helm-type Application may commit a symlink which points to an out-of-bounds file. If the target file is a valid YAML file, the attacker can read the contents of that file. Sensitive files which could be leaked include manifest files from other Applications' source repositories (potentially decrypted files, if you are using a decryption plugin) or any YAML-formatted secrets which have been mounted as files on the repo-server. Patches for this vulnerability has been released in the following Argo CD versions: v2.4.1, v2.3.5, v2.2.10 and v2.1.16. If you are using a version >=v2.3.0 and do not have any Helm-type Applications you may disable the Helm config management tool as a workaround.
🎖@cveNotify
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v1.3.0 are vulnerable to a symlink following bug allowing a malicious user with repository write access to leak sensitive YAML files from Argo CD's repo-server. A malicious Argo CD user with write access for a repository which is (or may be) used in a Helm-type Application may commit a symlink which points to an out-of-bounds file. If the target file is a valid YAML file, the attacker can read the contents of that file. Sensitive files which could be leaked include manifest files from other Applications' source repositories (potentially decrypted files, if you are using a decryption plugin) or any YAML-formatted secrets which have been mounted as files on the repo-server. Patches for this vulnerability has been released in the following Argo CD versions: v2.4.1, v2.3.5, v2.2.10 and v2.1.16. If you are using a version >=v2.3.0 and do not have any Helm-type Applications you may disable the Helm config management tool as a workaround.
🎖@cveNotify
GitHub
Merge pull request from GHSA-q4w5-4gq2-98vm · argoproj/argo-cd@04c3053
Signed-off-by: Michael Crenshaw <michael@crenshaw.dev>
fix tests/lint
Signed-off-by: Michael Crenshaw <michael@crenshaw.dev>
fix tests/lint
Signed-off-by: Michael Crenshaw <michael@crenshaw.dev>
🚨 CVE-2022-31039
Greenlight is a simple front-end interface for your BigBlueButton server. In affected versions an attacker can view any room's settings even though they are not authorized to do so. Only the room owner and administrator should be able to view a room's settings. This issue has been patched in release version 2.12.6.
🎖@cveNotify
Greenlight is a simple front-end interface for your BigBlueButton server. In affected versions an attacker can view any room's settings even though they are not authorized to do so. Only the room owner and administrator should be able to view a room's settings. This issue has been patched in release version 2.12.6.
🎖@cveNotify
GitHub
GitHub is where people build software. More than 83 million people use GitHub to discover, fork, and contribute to over 200 million projects.
🚨 CVE-2022-2113
Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.7.2.
🎖@cveNotify
Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.7.2.
🎖@cveNotify
GitHub
Back porting of security patches (#3197) · inventree/InvenTree@26bf51c
* Merge pull request from GHSA-fr2w-mp56-g4xp
* Enforce file download for attachments table(s)
* Enforce file download for attachment in 'StockItemTestResult' table
(cherry...
* Enforce file download for attachments table(s)
* Enforce file download for attachment in 'StockItemTestResult' table
(cherry...
🚨 CVE-2022-2111
Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2.
🎖@cveNotify
Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2.
🎖@cveNotify
GitHub
Back porting of security patches (#3197) · inventree/InvenTree@26bf51c
* Merge pull request from GHSA-fr2w-mp56-g4xp
* Enforce file download for attachments table(s)
* Enforce file download for attachment in 'StockItemTestResult' table
(cherry...
* Enforce file download for attachments table(s)
* Enforce file download for attachment in 'StockItemTestResult' table
(cherry...
🚨 CVE-2022-31296
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/view_post.php.
🎖@cveNotify
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/view_post.php.
🎖@cveNotify
SourceCodester
Online Discussion Forum Site in PHP/OOP Free Source Code
Introduction This simple project is entitled Online Discussion Forum Site. This is a web-based application project developed in PHP and MySQL Database. This simple project's main goal is to provide an online platform for an organization where they can discuss…
🚨 CVE-2022-31357
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.
🎖@cveNotify
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.
🎖@cveNotify
GitHub
bug_report/SQLi-3.md at main · debug601/bug_report
Contribute to debug601/bug_report development by creating an account on GitHub.
🚨 CVE-2022-31356
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=.
🎖@cveNotify
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=.
🎖@cveNotify
GitHub
bug_report/SQLi-4.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.