Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability

Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedicated for the hostname field.

Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.

Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.

Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.

Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.

Use of Out-of-range Pointer Offset in ComputerVision

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

Animate | Access of Uninitialized Pointer (CWE-824)

Animate versions 23.0.7, 24.0.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Incorrect Synchronization in GitLab

An information disclosure issue has been discovered in GitLab EE affecting all versions starting from 16.5 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. A maintainer could obtain a Dependency Proxy password by editing a certain Dependency Proxy setting.

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecified vectors.

Zen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability

Zen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Zen Cart. Authentication is not required to exploit this vulnerability. The specific flaw exists within the findPluginAdminPage function. The issue results from the lack of proper validation of user-supplied data prior to passing it to a PHP include function. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account. Was ZDI-CAN-21408.

NGINX Plus MQTT vulnerability

When the NGINX Plus is configured to use the MQTT pre-read module, undisclosed requests can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

kernel: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: netrom: Fix a data-race around sysctl_netrom_default_path_quality

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: netrom: Fix a data-race around sysctl_netrom_transport_timeout

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: netrom: Fix a data-race around sysctl_netrom_transport_busy_delay

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.