Schwachstellen, die jetzt zählen.

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Arbitrary command execution via .recover command

vsftpd: vsftpd: access control bypass via RFC 775 command aliases

github.com/prometheus/common: Prometheus: Information disclosure via HTTP redirects in remote write requests

phpMyAdmin: phpMyAdmin: Arbitrary SQL execution via CSRF token bypass

phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to execute arbitrary SQL by bypassing CSRF token checks on non-AJAX POST requests. Attackers can lure authenticated victims into submitting cross-site POSTs carrying sql_query to /sql or /database/sql, running SQL with the victim's database privileges under http or config authentication.

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Arbitrary code execution via crafted session changesets

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Denial of Service via use-after-free in R-Tree extension

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Authorization bypass via USING clause in JOIN queries

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Denial of Service via stack exhaustion from chained COLLATE operators

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Information disclosure via undersized WAL page size

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Arbitrary code execution via corrupted FTS5 index

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Denial of Service via use-after-free in full-text search

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Denial of Service via stack exhaustion from deeply nested Common Table Expressions

proftpd: proftpd: Authorization bypass via mod_sftp copy-file extension

org.infinispan/infinispan-query: Infinispan: Deeply nested Ickle queries can trigger a StackOverflowError

Google Cloud Identity Platform: Firebase Authentication: Google Cloud Identity Platform and Firebase Authentication: Arbitrary JavaScript execution via…

This issue affects Apache Fineract versions up to and including 1.15.0.

This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GET /api/v1/centers) and the datatable entry read endpoints (GET /api/v1/datatables/{datatable}/{apptableId} and GET /api/v1/datatables/{datatable}/{apptableId}/{datatableId}) concatenate caller-supplied ordering parameters (orderBy, sortOrder, order) directly into the SQL ORDER BY clause. The existing regex-based input validation can be bypassed, allowing time-based blind SQL…

Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fineract (through version 1.15.0).

Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fineract (through version 1.15.0). The vulnerability affects the outStandingAmountPercentageCondition parameter of the /fineract-provider/api/v1/search/advance HTTP API endpoint, allowing SQL injection due to insufficient input neutralization. Users are recommended to upgrade to version 1.16.1, which will fix the issue.

elixir: elixir: Arbitrary code execution via insecure temporary file handling in Mix

elixir: Elixir: Denial of Service via unbounded integer parsing in JSON module

elixir: elixir: Denial of Service via excessively long port number in URI parser

capi: capi: Privilege escalation via unauthorized application configuration modification

Graphics DDK: Graphics DDK: Memory corruption via crafted WebGPU content

libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service

libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

firefox: thunderbird: RSS feed could redirect its subscription to a local file or network share

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen