CVE-2023-45927

The S-Lang library (specifically version 2.3.2 ) is vulnerable to a Denial of Service (DoS) condition. The root cause is an arithmetic exception triggered via the tt_sprintf() function. Specifically, the vulnerability arises from an uncaught exception caused by parsing a corrupted terminfo file ,...

CVE-2023-45929

The S-Lang library (specifically libslang.so ) is vulnerable to a segmentation fault in the fixup_tgetstr() function. The root cause is the improper handling of a corrupted terminfo file , which can lead to a Denial of Service (DoS) . This issue affects S-Lang 2.3.2 and related versions like 2.3....

S-Lang 安全漏洞

S-Lang is an S-Lang open source software library for Unix, Windows, VMS, OS / 2 and Mac OS X. A security vulnerability exists in S-Lang version 2.3.2, which stems from the discovery of a contained arithmetic exception vulnerability via the function ttsprintf...

CVE-2023-45927: Improper Check or Handling of Exceptional Conditions

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...

CVE-2023-45929: Buffer Copy without Checking Size of Input

S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixuptgetstr...

S-Lang 安全漏洞

S-Lang is an S-Lang open source software library for Unix, Windows, VMS, OS / 2 and Mac OS X. A security vulnerability exists in S-Lang version 2.3.2, which stems from the discovery of a containment segmentation error vulnerability via the function fixuptgetstr...

CVE-2023-45929

S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixuptgetstr...

CVE-2023-45927

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...

CVE-2023-45927

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...

CVE-2023-45929

S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixuptgetstr...

PT-2024-13311 · S-Lang +1 · S-Lang +1

Name of the Vulnerable Software and Affected Versions: S-Lang version 2.3.2 Description: A segmentation fault was discovered in S-Lang via the function fixup tgetstr. Recommendations: For S-Lang version 2.3.2, consider disabling the fixup tgetstr function as a temporary workaround until a patch i...

Fedora: Security Advisory (FEDORA-2024-d8a0e599e2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-18972 · Kiloview · Kiloview Ndi

Name of the Vulnerable Software and Affected Versions: Kiloview NDI versions prior to 2.02.0227 Description: The issue is related to the use of hard-coded credentials in Kiloview NDI, allowing un-authenticated users to bypass authentication. This affects models N3, N3-s, N4, N20, N30, N40...

Elspec G5 digital fault recorder security vulnerability

The Elspec G5 digital fault recorder is a digital fault recorder from Elspec, Israel, used to monitor and record fault events and waveform data in power systems. A security vulnerability exists in Elspec G5 version 1.1.4.15 and earlier, which stems from the presence of a hard-coded backdoor sessi...

Debian: Security Advisory (DLA-3765-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

rinex-s-school.thinkific.com Cross Site Request Forgery vulnerability OBB-3876689

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-1535: Improper Neutralization of Input During Web Page Generation

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 4.15.2 due to insufficient input sanitizati...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1332)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Updates for Microsoft SharePoint Server 2019 (March 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Security Updates for Microsoft SharePoint Server Subscription Edition (March 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized...