deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-2932
Published: 2024-03-27
Description: A vulnerability classified as critical has been found in SourceCodester Online Chatting System 1.0. Affected is an unknown function of the file admin/update_room.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258012.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/CveSecLook/cve/issues/3; https://vuldb.com/?ctiid.258012; https://vuldb.com/?id.258012
CVE: CVE-2024-2934
Published: 2024-03-27
Description: A vulnerability classified as critical was found in SourceCodester Todo List in Kanban Board 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete-todo.php. The manipulation of the argument list leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258013 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BurakSevben/CVEs/blob/main/To%20Do%20List%20App/To%20Do%20List%20App%20-%20SQL%20Injection.md; https://vuldb.com/?ctiid.258013; https://vuldb.com/?id.258013
CVE: CVE-2024-2935
Published: 2024-03-27
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Todo List in Kanban Board 1.0. Affected by this issue is some unknown functionality of the component Add ToDo. The manipulation of the argument Todo leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/BurakSevben/CVEs/blob/main/To%20Do%20List%20App/To%20Do%20List%20App%20-%20Cross-Site-Scripting.md; https://vuldb.com/?ctiid.258014; https://vuldb.com/?id.258014
CVE: CVE-2024-2938
Published: 2024-03-27
Description: A vulnerability was found in Campcodes Online Examination System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adminpanel/admin/facebox_modal/updateCourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258029 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Beatriz-ai-boop/cve/blob/main/report/1.pdf; https://vuldb.com/?ctiid.258029; https://vuldb.com/?id.258029
CVE: CVE-2024-2939
Published: 2024-03-27
Description: A vulnerability classified as problematic has been found in Campcodes Online Examination System 1.0. Affected is an unknown function of the file /adminpanel/admin/facebox_modal/updateExaminee.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258030 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/Beatriz-ai-boop/cve/blob/main/report/2.pdf; https://vuldb.com/?ctiid.258030; https://vuldb.com/?id.258030
CVE: CVE-2024-1531
Published: 2024-03-27
Description: A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could print random memory content in the RTU500 system log, if an authorized user uploads a specially crafted stb-language file.
CVSS Score: 8.2 (HIGH)
CWE: CWE-434
References: https://publisher.hitachienergy.com/preview?DocumentId=8DBD000190&languageCode=en&Preview=true; https://publisher.hitachienergy.com/preview?DocumentId=8DBD000190&languageCode=en&Preview=true
CVE: CVE-2024-2244
Published: 2024-03-27
Description: REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successful service invocation. The anomaly doesn’t exist with other credential combinations.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://publisher.hitachienergy.com/preview?DocumentId=8DBD000195&languageCode=en&Preview=true; https://publisher.hitachienergy.com/preview?DocumentId=8DBD000195&languageCode=en&Preview=true
CVE: CVE-2024-2940
Published: 2024-03-27
Description: A vulnerability classified as problematic was found in Campcodes Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /adminpanel/admin/facebox_modal/updateCourse.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258031.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/Beatriz-ai-boop/cve/blob/main/report/3.pdf; https://vuldb.com/?ctiid.258031; https://vuldb.com/?id.258031
CVE: CVE-2024-0400
Published: 2024-03-27
Description: SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189&languageCode=en&Preview=true; https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189&languageCode=en&Preview=true
CVE: CVE-2024-1532
Published: 2024-03-27
Description: A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor could enforce diagnostic texts being displayed as empty strings, if an authorized user uploads a specially crafted stb-language file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-434
References: https://publisher.hitachienergy.com/preview?DocumentId=8DBD000190&languageCode=en&Preview=true; https://publisher.hitachienergy.com/preview?DocumentId=8DBD000190&languageCode=en&Preview=true
CVE: CVE-2024-24334
Published: 2024-03-27
Description: A heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.
CVSS Score: 8.4 (HIGH)
CWE: CWE-122
References: http://seclists.org/fulldisclosure/2024/Mar/28; http://www.openwall.com/lists/oss-security/2024/03/05/1; https://github.com/RT-Thread/rt-thread/issues/8282
CVE: CVE-2024-24335
Published: 2024-03-27
Description: A heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.
CVSS Score: 8.4 (HIGH)
CWE: CWE-122
References: http://www.openwall.com/lists/oss-security/2024/03/05/1; https://github.com/RT-Thread/rt-thread/issues/8271; https://github.com/RT-Thread/rt-thread/pull/8278
CVE: CVE-2024-25388
Published: 2024-03-27
Description: drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.
CVSS Score: 8.4 (HIGH)
CWE: CWE-195
References: http://www.openwall.com/lists/oss-security/2024/03/05/1; https://github.com/RT-Thread/rt-thread/issues/8285; https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
CVE: CVE-2024-25389
Published: 2024-03-27
Description: RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed + 2531011L; return (seed >> 16) & 0x7FFF;" in calc_random in drivers/misc/rt_random.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-338
References: http://www.openwall.com/lists/oss-security/2024/03/05/1; https://github.com/RT-Thread/rt-thread/issues/8283; https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
CVE: CVE-2024-25390
Published: 2024-03-27
Description: A heap buffer overflow occurs in finsh/msh_file.c and finsh/msh.c in RT-Thread through 5.0.2.
CVSS Score: 8.4 (HIGH)
CWE: CWE-122
References: http://www.openwall.com/lists/oss-security/2024/03/05/1; https://github.com/RT-Thread/rt-thread/issues/8286; https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
CVE: CVE-2024-25391
Published: 2024-03-27
Description: A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2.
CVSS Score: 8.4 (HIGH)
CWE: CWE-121
References: http://www.openwall.com/lists/oss-security/2024/03/05/1; https://github.com/RT-Thread/rt-thread/issues/8287; https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
CVE: CVE-2024-25392
Published: 2024-03-27
Description: An out-of-bounds access occurs in utilities/var_export/var_export.c in RT-Thread through 5.0.2.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2024/03/05/1; https://github.com/RT-Thread/rt-thread/issues/8290; https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
CVE: CVE-2024-25393
Published: 2024-03-27
Description: A stack buffer overflow occurs in net/at/src/at_server.c in RT-Thread through 5.0.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: http://www.openwall.com/lists/oss-security/2024/03/05/1; https://github.com/RT-Thread/rt-thread/issues/8288; https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
CVE: CVE-2024-25394
Published: 2024-03-27
Description: A buffer overflow occurs in utilities/ymodem/ry_sy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-120
References: http://www.openwall.com/lists/oss-security/2024/03/05/1; https://github.com/RT-Thread/rt-thread/issues/8291; https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
CVE: CVE-2024-25395
Published: 2024-03-27
Description: A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: http://www.openwall.com/lists/oss-security/2024/03/05/1; https://github.com/RT-Thread/rt-thread/issues/8289; https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
CVE: CVE-2024-25580
Published: 2024-03-27
Description: An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-120
References: https://www.qt.io/blog/security-advisory-potential-buffer-overflow-when-reading-ktx-images; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYE2NMN67DYHYJKLAKLGR64OYI7A63AH/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZWTGLKC3WBDHZ5OJRSEB2QUR7XXZDLZV/
CVE: CVE-2024-25734
Published: 2024-03-27
Description: An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only after a valid username is entered, which might make it easier for remote attackers to enumerate user accounts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/177081; https://hyp3rlinx.altervista.org; http://packetstormsecurity.com/files/177081
CVE: CVE-2024-25735
Published: 2024-03-27
Description: An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-319
References: http://packetstormsecurity.com/files/177082; https://hyp3rlinx.altervista.org; http://packetstormsecurity.com/files/177082
CVE: CVE-2024-25736
Published: 2024-03-27
Description: An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can restart the device via a /device/reboot GET request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://packetstormsecurity.com/files/177083; https://hyp3rlinx.altervista.org; http://packetstormsecurity.com/files/177083
CVE: CVE-2024-2097
Published: 2024-03-27
Description: An authenticated malicious client can send a special LINQ query
to execute arbitrary code remotely (RCE) on the SCM server
from List control, and execute the arbitrary code on the same
system where SCMArchivedEventViewerTool is installed in the
case of SCM Tools.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189&languageCode=en&Preview=true; https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189&languageCode=en&Preview=true
CVE: CVE-2024-2139
Published: 2024-03-27
Description: The Master Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pricing Table widget in all versions up to, and including, 2.0.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3050636/master-addons; https://www.wordfence.com/threat-intel/vulnerabilities/id/8910b6f0-1bf4-4ac0-93b7-54db7c15392c?source=cve; https://plugins.trac.wordpress.org/changeset/3050636/master-addons
CVE: CVE-2024-2203
Published: 2024-03-27
Description: The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Clients widget. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/changeset/3056776/the-plus-addons-for-elementor-page-builder; https://www.wordfence.com/threat-intel/vulnerabilities/id/dc7ff863-3a8e-41cd-ae20-78bb4577c16a?source=cve; https://plugins.trac.wordpress.org/changeset/3056776/the-plus-addons-for-elementor-page-builder
CVE: CVE-2024-2210
Published: 2024-03-27
Description: The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Team Member Listing widget. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/changeset/3056776/the-plus-addons-for-elementor-page-builder; https://www.wordfence.com/threat-intel/vulnerabilities/id/30579058-54f4-4496-9275-078faf99823f?source=cve; https://plugins.trac.wordpress.org/changeset/3056776/the-plus-addons-for-elementor-page-builder
CVE: CVE-2024-2941
Published: 2024-03-27
Description: A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /adminpanel/admin/query/loginExe.php. The manipulation of the argument pass leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258032.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Examination%20System/Online%20Examination%20System%20-%20vuln%201.pdf; https://vuldb.com/?ctiid.258032; https://vuldb.com/?id.258032
CVE: CVE-2024-2942
Published: 2024-03-27
Description: A vulnerability, which was classified as critical, was found in Campcodes Online Examination System 1.0. This affects an unknown part of the file /adminpanel/admin/query/deleteQuestionExe.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258033 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Examination%20System/Online%20Examination%20System%20-%20vuln%202.pdf; https://vuldb.com/?ctiid.258033; https://vuldb.com/?id.258033
CVE: CVE-2024-2943
Published: 2024-03-27
Description: A vulnerability has been found in Campcodes Online Examination System 1.0 and classified as critical. This vulnerability affects unknown code of the file /adminpanel/admin/query/deleteExamExe.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-258034 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Examination%20System/Online%20Examination%20System%20-%20vuln%203.pdf; https://vuldb.com/?ctiid.258034; https://vuldb.com/?id.258034
CVE: CVE-2024-2944
Published: 2024-03-27
Description: A vulnerability was found in Campcodes Online Examination System 1.0 and classified as critical. This issue affects some unknown processing of the file /adminpanel/admin/query/deleteCourseExe.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258035.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Examination%20System/Online%20Examination%20System%20-%20vuln%204.pdf; https://vuldb.com/?ctiid.258035; https://vuldb.com/?id.258035
CVE: CVE-2024-2945
Published: 2024-03-27
Description: A vulnerability was found in Campcodes Online Examination System 1.0. It has been classified as critical. Affected is an unknown function of the file /adminpanel/admin/facebox_modal/updateExaminee.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258036.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Examination%20System/Online%20Examination%20System%20-%20vuln%205.pdf; https://vuldb.com/?ctiid.258036; https://vuldb.com/?id.258036
CVE: CVE-2023-39804
Published: 2024-03-27
Description: In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
CVSS Score: 6.2 (MEDIUM)
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1058079; https://git.savannah.gnu.org/cgit/tar.git/commit/?id=a339f05cd269013fa133d2f148d73f6f7d4247e4; https://git.savannah.gnu.org/cgit/tar.git/tree/src/xheader.c?h=release_1_34#n1723
CVE: CVE-2023-40284
Published: 2024-03-27
Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023; https://www.supermicro.com/en/support/security_center#%21advisories; https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE: CVE-2023-40285
Published: 2024-03-27
Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023; https://www.supermicro.com/en/support/security_center#%21advisories; https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE: CVE-2023-40286
Published: 2024-03-27
Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023; https://www.supermicro.com/en/support/security_center#%21advisories; https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE: CVE-2023-40287
Published: 2024-03-27
Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023; https://www.supermicro.com/en/support/security_center#%21advisories; https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE: CVE-2023-40288
Published: 2024-03-27
Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023; https://www.supermicro.com/en/support/security_center#%21advisories; https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE: CVE-2023-40289
Published: 2024-03-27
Description: A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023; https://www.supermicro.com/en/support/security_center#%21advisories; https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE: CVE-2023-40290
Published: 2024-03-27
Description: An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023; https://www.supermicro.com/en/support/security_center#%21advisories; https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2023
CVE: CVE-2023-45913
Published: 2024-03-27
Description: Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-476
References: http://seclists.org/fulldisclosure/2024/Jan/28; https://gitlab.freedesktop.org/mesa/mesa/-/issues/9856; https://seclists.org/fulldisclosure/2024/Jan/71
CVE: CVE-2023-45927
Published: 2024-03-27
Description: S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-703
References: http://lists.jedsoft.org/lists/slang-users/2023/0000003.html; https://seclists.org/fulldisclosure/2024/Jan/55; http://lists.jedsoft.org/lists/slang-users/2023/0000003.html
CVE: CVE-2023-45929
Published: 2024-03-27
Description: S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: http://lists.jedsoft.org/lists/slang-users/2023/0000002.html; http://seclists.org/fulldisclosure/2024/Jan/57; http://lists.jedsoft.org/lists/slang-users/2023/0000002.html
CVE: CVE-2023-45931
Published: 2024-03-27
Description: Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gitlab.freedesktop.org/mesa/mesa/-/issues/9859; https://seclists.org/fulldisclosure/2024/Jan/71; http://packetstormsecurity.com/files/176813/Mesa-23.0.4-Null-Pointer.html