golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

A flaw was found in the Go encoding/binary package. Certain invalid inputs to the ReadUvarint or the ReadVarint causes those functions to read an unlimited number of bytes from the ByteReader argument before returning an error. This flaw possibly leads to processing more input than expected. The...

Binary Vulnerability in H3C ER3100 VPN Router

The H3C ER3100 is a high-performance VPN router targeted at the SMB market with Ethernet/fiber/ADSL access and network environments such as government, enterprise organizations, and Internet cafes. A binary vulnerability exists in the H3C ER3100 VPN Router, which can be exploited by attackers to...

CVE-2021-20266

A flaw was found in RPM's hdrblobInit in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability...

Binary Vulnerability in AC11 of Shenzhen Jixiang Tengda Technology Co. Ltd (CNVD-2021-35779)

The Tundra AC11 is a wireless router that uses the RTOS operating system. A binary vulnerability exists in the Shenzhen Jixiang Tengda AC11, which can be exploited by attackers to cause a denial of service...

Binary Vulnerability in MapWeb.ocx Control of CenturyStar Configuration Software

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

OpenClinic GA Elevation of Privilege Vulnerability

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. An elevation of privilege vulnerability exists in OpenClinic GA version 5.173.3, which stems from a default privileg...

CVE-2021-21415

Prisma VS Code a VSCode extension for Prisma schema files. This is a Remote Code Execution Vulnerability that affects all versions of the Prisma VS Code extension older than 2.20.0. If a custom binary path for the Prisma format binary is set in VS Code Settings, for example by downloading a proje...

Remote code execution

Prisma VS Code a VSCode extension for Prisma schema files. This is a Remote Code Execution Vulnerability that affects all versions of the Prisma VS Code extension older than 2.20.0. If a custom binary path for the Prisma format binary is set in VS Code Settings, for example by downloading a proje...

CVE-2021-21415 Visual Studio Code Prisma Extension Remote Code Execution Vulnerability

Prisma VS Code a VSCode extension for Prisma schema files. This is a Remote Code Execution Vulnerability that affects all versions of the Prisma VS Code extension older than 2.20.0. If a custom binary path for the Prisma format binary is set in VS Code Settings, for example by downloading a proje...

CVE-2020-21992

Inim Electronics SmartLiving SmartLAN/G/SI =6.x suffers from an authenticated remote command injection vulnerability. The issue exist due to the 'par' POST parameter not being sanitized when called with the 'testemail' module through web.cgi binary. The vulnerable CGI binary ELF 32-bit LSB...

Command injection

Inim Electronics SmartLiving SmartLAN/G/SI =6.x suffers from an authenticated remote command injection vulnerability. The issue exist due to the 'par' POST parameter not being sanitized when called with the 'testemail' module through web.cgi binary. The vulnerable CGI binary ELF 32-bit LSB...

PT-2021-14490 · Prisma · Prisma Vs Code

Name of the Vulnerable Software and Affected Versions: Prisma VS Code versions prior to 2.20.0 Description: This issue is a Remote Code Execution vulnerability. It affects the Prisma VS Code extension when a custom binary path for the Prisma format binary is set in VS Code Settings, for example,...

Apple iOS < 14.5 Multiple Vulnerabilities (HT212317)

Binary data appleios145check.nbin...

CVE-2020-22782

Etherpad 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance...

CVE-2020-22782

Etherpad 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance...

Design/Logic Flaw

Etherpad 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance...

CVE-2020-22782

Etherpad 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance...

Binary Vulnerability in H3C ER G2 Series Routers

H3C ER G2 series is a new generation of enterprise-class Gigabit high-performance routers launched by Hangzhou Huasan Communication Technology Co. A binary vulnerability exists in the H3C ER G2 series routers, which can be exploited by attackers to cause a denial of service...

PT-2021-10789

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 1.8.3 Description The issue is related to a denial of service in the import functionality. Specifically, uploading a binary file to the import endpoint can cause the instance to crash. Recommendations For versions...

Binary Vulnerability in Rising Antivirus V17 (CNVD-2021-34202)

Rising Antivirus V17 is powered by Rising's quad-core antivirus engine, which is powerful enough to fully check and kill viruses and Trojans prevalent in the network. Rising Antivirus V17 has a binary vulnerability that can be exploited by attackers to cause a denial of service...