Debian Linux Security Advisory 5362-1 - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c.
a6c42c4fa46b453dd5a470c4e086922ae874af1bd2bd96fd5186bf71571228ebSimple Food Ordering System version 1.0 suffers from a cross site scripting vulnerability.
d45b72ba3cbe274c827044256c4b4168a57d0681e2452019badcd0d14e196de2Debian Linux Security Advisory 5361-1 - Several flaws were found in tiffcrop, a program distributed by tiff, the Tag Image File Format (TIFF) library and tools. A specially crafted tiff file can lead to an out-of-bounds write or read resulting in a denial of service.
1404aec50e3d5d5f0e7677de3be642069da3ce8f1fbe90f9a1854a9dd500dc50Music Gallery Site version 1.0 suffers from multiple remote SQL injection vulnerabilities.
9704f940761214dcdecce1c26ad4d0916f8ff37567c16827a4d79794fdb77dc3Music Gallery Site version 1.0 suffers from a missing authentication vulnerability that allows for privilege escalation.
fa792fe11043726d6d6e1175130d9b2d4eaddaca348d07b29980ca82930472c4Arm Mali suffers from an insufficient cache invalidation for non-page-aligned user buffer imports.
1cc19cb79a91228a44e5c6196c91a498b37c74f153ea14e278fe6327355cc218Debian Linux Security Advisory 5360-1 - Xi Lu discovered that missing input sanitising in Emacs (in etags, the Ruby mode and htmlfontify) could result in the execution of arbitrary shell commands.
82d11ef9e76f7318d8a66038c6614675b087dfdc2b8d50aad0fe55d3dd74b5c7Employee Task Management System version 1.0 suffers from multiple remote SQL injection vulnerabilities.
61c6766d769ec7043a81a96c62d74e65955f769b66aaff8f4bfc3a5b20cefeb4Employee Task Management System version 1.0 suffers from a privilege escalation vulnerability due to a broken access control where a lower privileged user's cookie can be leveraged to takeover an administrative account.
b1783a8753bc4111f4b0d303376dc5a00d0d4803612a9778ff19e0890bd6ed0aDebian Linux Security Advisory 5359-1 - Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
7843617dec4bb3e700e21f91ba5248a0b767d9fd5d3e9747c378549fa4f68f46Auto Dealer Management System version 1.0 suffers from multiple remote SQL injection vulnerabilities.
fc279b85a361eb107aee9d16a84f833ad461c184198e5280a62c2d239925c73bAuto Dealer Management System version 1.0 suffers from a privilege escalation vulnerability due to a broken access control where a lower privileged user's cookie can be leveraged to takeover an administrative account.
9bc965c2b47f29386cbcd9d3d7b57590f9194dcf6b4d4243acdeba28e3a65f4eKshitish Multipurpose eCommerce Platform version 2.0 leaves default administrative credentials installed post installation.
2477d52210510658d6214fbccf04faa8b5eec226329f88dd15fa98fd54677c30
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed