Vuldb Updates

A vulnerability, which was classified as critical, has been found in OpenEXR up to 2.4.0. Affected by this issue is the function copyIntoFrameBuffer of the file ImfMisc.cpp. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2020-11764. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in OpenEXR up to 2.4.0. This affects the function DwaCompressor::Classifier::Classifier of the file ImfXdr.h. The manipulation leads to off-by-one. This vulnerability is uniquely identified as CVE-2020-11765. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in SAP Business Intelligence Platform 4.1/4.2. This affects an unknown part. The manipulation leads to open redirect. This vulnerability is uniquely identified as CVE-2020-6211. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in SAP NetWeaver AS ABAP Business Server Pages Test Application IT00 up to 754. This issue affects some unknown processing. The manipulation leads to open redirect. The identification of this vulnerability is CVE-2020-6215. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in SAP Business Intelligence Platform 4.2. Affected is an unknown function. The manipulation leads to basic cross site scripting (Reflected). This vulnerability is traded as CVE-2020-6216. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as critical was found in Google Chrome. Affected by this vulnerability is an unknown functionality of the component WebRTC. The manipulation leads to use after free. This vulnerability is known as CVE-2024-1059. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in xmall 1.1. Affected by this vulnerability is an unknown functionality. The manipulation of the argument orderDir leads to sql injection. This vulnerability is known as CVE-2024-24112. Access to the local network is required for this attack to succeed. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in IMOU GO 1.0.11. Affected by this issue is some unknown functionality of the component com.oneed.dvr.service.DownloadFirmwareService. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2023-47353. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in iSpyConnect Agent DVR 5.1.6.0 and classified as problematic. This issue affects some unknown processing of the component Upload Audio. The manipulation leads to unrestricted upload. The identification of this vulnerability is CVE-2024-22515. The attack needs to be approached within the local network. There is no exploit available.

A vulnerability classified as critical was found in Google Android kernel. Affected by this vulnerability is an unknown functionality. The manipulation leads to out-of-bounds write. This vulnerability is known as CVE-2024-22012. Local access is required to approach this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in jshERP 3.3 and classified as critical. Affected by this vulnerability is the function findInOutMaterialCount of the component com.jsh.erp.controller.DepotHeadController. The manipulation of the argument column/order leads to sql injection. This vulnerability is known as CVE-2024-24003. The attack needs to be done within the local network. There is no exploit available.

A vulnerability, which was classified as critical, was found in OpenObserve up to 0.7.x. Affected is an unknown function of the file /api/{org_id}/users of the component Role-Based Access Control. The manipulation leads to improper authorization. This vulnerability is traded as CVE-2024-24830. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Softing OPC UA C++ SDK up to 6.9. It has been rated as critical. Affected by this issue is some unknown functionality of the component Browse Request Handler. The manipulation leads to use after free. This vulnerability is handled as CVE-2022-39823. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Softing OPC UA C++ SDK up to 6.9. This issue affects some unknown processing of the component Array Handler. The manipulation leads to buffer overflow. The identification of this vulnerability is CVE-2022-37453. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Rukovoditel 3.2.1. It has been rated as problematic. This issue affects some unknown processing of the file /index.php?module=global_lists/lists of the component Global Lists. The manipulation of the argument Name leads to cross site scripting. The identification of this vulnerability is CVE-2022-43164. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic has been found in Rukovoditel 3.2.1. Affected is an unknown function of the file /index.php?module=global_vars/vars of the component Global Variables. The manipulation of the argument Value leads to cross site scripting. This vulnerability is traded as CVE-2022-43165. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in Rukovoditel 3.2.1. Affected by this vulnerability is an unknown functionality of the file /index.php?module=entities/entities of the component Global Entities. The manipulation of the argument Name leads to cross site scripting. This vulnerability is known as CVE-2022-43166. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in Rukovoditel 3.2.1. Affected by this issue is some unknown functionality of the file /index.php?module=users_alerts/users_alerts of the component Users Alerts. The manipulation of the argument Title leads to cross site scripting. This vulnerability is handled as CVE-2022-43167. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Rukovoditel 3.2.1. This affects an unknown part of the file /index.php?module=users_groups/users_groups of the component Users Access Groups. The manipulation of the argument Name leads to cross site scripting. This vulnerability is uniquely identified as CVE-2022-43169. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in WebAssembly wabt 1.0.29. This issue affects the function std::allocator<wabt::Type>>::size in the library /bits/stl_vector.h. The manipulation leads to heap-based buffer overflow. The identification of this vulnerability is CVE-2022-43281. The attack can only be done within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.