Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; never assigned.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.

Unrestricted Groovy Execution in Jenkins Multijob Plugin

Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in the CommentBat feature.

A stack-based buffer overflow vulnerability exists in the cmd_edl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fw_flash command, where the <filename> argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical access to the UART3 serial interface can exploit this vulnerability by sending a maliciously crafted command with an oversized filename parameter,

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.

Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle

Guzzle is an extensible PHP HTTP client. Prior to 7.12.1, CookieJar incorrectly accepts cookies with a dot-only Domain attribute and whitespace-padded variants. SetCookie::matchesDomain() removes leading dots from the cookie domain, normalizing dot-only values to the empty string; SetCookie::validate() only rejected a strictly empty domain, so these cookies could be stored and the empty normalized domain was treated as matching any request host. An attacker-controlled origin that an application requests with a shared cookie jar can therefore set a cookie that Guzzle later sends to unrelated hosts using the same jar. This may allow cookie injection or session fixation against downstream services, depending on how those services interpret the injected cookie. This vulnerability is fixed in 7.12.1.

open62541: open62541: Heap-based buffer overflow in HistoryRead path

open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend.

A reflected cross-site scripting (XSS) vulnerability in the Forum posting function of O2OA v10 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL.