Schwachstellen, die jetzt zählen.

mdns: mdns: Denial of Service via uncontrolled recursion in domain name parsing

ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS version 1.11.2, the `mdns` component follows DNS name-compression pointers recursively when parsing fully qualified domain names (FQDNs) in inbound mDNS packets without capping pointer-follow depth in `mdns_utils_read_fqdn()`. An unauthenticated attacker on the same link-local network can send a crafted packet to UDP port 5353 on an `ESP-IDF` device using `espressif/mdns` with mDNS enabled. Deep…

libmspack: libmspack: Information disclosure via unchecked back-references in MS-ZIP decompressor

github.com/traefik/traefik: traefik: Denial of Service via race condition in FastProxy

github.com/traefik/traefik: Traefik: Cross-namespace authorization bypass via cached TLS client authentication

github.com/traefik/traefik: Traefik: Authentication bypass via Ingress TLS configuration conflict

perl-starlet: Starlet: Denial of Service via unbounded buffering in chunked request decoding

perl-starlet: Starlet: Denial of Service via regular expression backtracking

perl-starlet: perl-starlet: Denial of Service via large Content-Length header

perl-http-parser-xs: HTTP::Parser::XS: Security control bypass via path truncation on encoded null bytes

qt: qt: Denial of Service via NULL pointer dereference during QCborValue to JSON conversion

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Denial of Service via stack exhaustion in countOfViewOptimization()

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Arbitrary command execution via .recover command

vsftpd: vsftpd: access control bypass via RFC 775 command aliases

github.com/prometheus/common: Prometheus: Information disclosure via HTTP redirects in remote write requests

phpMyAdmin: phpMyAdmin: Arbitrary SQL execution via CSRF token bypass

phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to execute arbitrary SQL by bypassing CSRF token checks on non-AJAX POST requests. Attackers can lure authenticated victims into submitting cross-site POSTs carrying sql_query to /sql or /database/sql, running SQL with the victim's database privileges under http or config authentication.

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Arbitrary code execution via crafted session changesets

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Denial of Service via use-after-free in R-Tree extension

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Authorization bypass via USING clause in JOIN queries

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Denial of Service via stack exhaustion from chained COLLATE operators

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Information disclosure via undersized WAL page size

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Arbitrary code execution via corrupted FTS5 index

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Denial of Service via use-after-free in full-text search

SQLite: Mehrere Schwachstellen

sqlite: sqlite: Denial of Service via stack exhaustion from deeply nested Common Table Expressions

proftpd: proftpd: Authorization bypass via mod_sftp copy-file extension

org.infinispan/infinispan-query: Infinispan: Deeply nested Ickle queries can trigger a StackOverflowError

Google Cloud Identity Platform: Firebase Authentication: Google Cloud Identity Platform and Firebase Authentication: Arbitrary JavaScript execution via…

elixir: elixir: Arbitrary code execution via insecure temporary file handling in Mix

elixir: Elixir: Denial of Service via unbounded integer parsing in JSON module

elixir: elixir: Denial of Service via excessively long port number in URI parser