CVE-2023-40968

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Buffer Overflow vulnerability in hzeller timg v.1.5.1 and before allows a remote attacker to cause a denial of service via the 0x61200000045c address.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/hzeller/timg/issues/115Exploit, Issue Tracking, Patch
https://github.com/hzeller/timg/releases/tag/v1.5.2Release Notes
https://github.com/hzeller/timg/issues/115Exploit, Issue Tracking, Patch
https://github.com/hzeller/timg/releases/tag/v1.5.2Release Notes

Timeline

Published: Sep 1, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-409696.1Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/modules/bibliography/CVE-2023-40978.8The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for CVE-2023-409708.8Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loan_rules.php.CVE-2023-40988.8It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disc CVE-2023-409809.8File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage m CVE-2023-409825.4A stored cross-site scripting (XSS) vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted p CVE-2023-409836.1A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scr CVE-2023-409845.4A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scr CVE-2023-409855.4An issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to exploit a Cross-Site Scripting (XSS) vulnerabi CVE-2023-409865.4A stored cross-site scripting (XSS) vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitra CVE-2023-409899.8SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted reques CVE-2023-40996.5The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient perm