База данных уязвимостей CVE

Unauthenticated PHP Object Injection in FunnelKit Automations <= 3.8.6.1 versions.

Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.

Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions.

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions.

Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions.

Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service. Attackers can delete their own service …

NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can submit an empty …

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when …

A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows a remote attacker to cause a crash in applications that process AV1 …

A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with malformed Multiview (MVC) Sequence Parameter Set data, the parser can …