8975 matches found
PT-2021-27644
Name of the Vulnerable Software and Affected Versions: git affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the git strntol64 function, git signature parse function, and git commit parse raw function...
PT-2021-27542
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurred in the parse sigalgs list function, and is associated with the SSL CTX set1 sigalgs...
PT-2021-27587
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue. The crash state involves several functions: ebml parse chunk, matroska type find, and gst type find factor...
PT-2021-27485
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions parse tables, process block, and do...
PT-2021-27576
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the git strntol64, git strntol32, and git signature parse functions. This suggests a...
PT-2021-4093
Name of the Vulnerable Software and Affected Versions JerryScript version 2.4.0 Description The issue is related to a heap-buffer-overflow in the lexer parse number function in the js-lexer.c file. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a...
PT-2021-28084
Name of the Vulnerable Software and Affected Versions dotnet affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the dotnet parse tilde 2, dotnet parse tilde, and dotnet parse com functions. This is based on an OSS-Fuzz report...
CVE-2020-7071
In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filtervar$url, FILTERVALIDATEURL, PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid to mis-parse the URL and produce wrong dat...
CVE-2020-28851
A flaw was found in golang.org. In x/text, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension...
GNU Binutils Null Pointer Dereference Vulnerability (CNVD-2021-01282)
GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A null pointer dereference vulnerability exists in bfdpefparsefunctionstubs in bfd/pef.c in versions of GNU Binutils prior to 2.34. An attacker can...
DEBIAN-CVE-2020-35507
There's a flaw in bfdpefparsefunctionstubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability...
kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c
A flaw was found in the Linux kernel. A local attacker, able to inject conntrack netlink configuration, could overflow a local buffer causing crashes or triggering the use of incorrect protocol numbers in ctnetlinkparsetuplefilter in net/netfilter/nfconntracknetlink.c. The highest threat from thi...
parse-server encryption issue vulnerability
parse-server is an open source Backend-as-a-Service BaaS framework , it is mainly used for application back-end processing . A security vulnerability exists in Parse Server versions prior to 4.5.0 that stems from LDAP authentication involving user passwords stored in plaintext. No details of the...
GNU Binutils 代码问题漏洞
GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A null pointer dereference vulnerability exists in bfdpefparsesymbols in bfd/pef.c in versions of GNU Binutils prior to 2.34. An attacker can cause...
AZL-41455 CVE-2020-28852 affecting package multus for versions less than 4.0.2-1
In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. x/text/language is supposed to be able to parse an HTTP Accept-Language header...
AZL-41422 CVE-2020-28851 affecting package multus for versions less than 4.0.2-1
In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. x/text/language is supposed to be able to parse an HTTP Accept-Language header...
DEBIAN-CVE-2020-28851
In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. x/text/language is supposed to be able to parse an HTTP Accept-Language header...
Out-of-bounds
In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. x/text/language is supposed to be able to parse an HTTP Accept-Language header...
Google Go Input Validation Error Vulnerability
Google Go is a static strongly-typed, compiled, concatenated, and garbage-collected programming language from Google, Inc. An input validation error vulnerability exists in Go version 1.15.4, which stems from the occurrence of "slice bounds out of range" in the language.ParseAcceptLanguage BCP 47...
PT-2021-11584 · X/Text +7 · X/Text +7
Name of the Vulnerable Software and Affected Versions: x/text versions 1.15.4 Description: An "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. The x/text/language package is supposed to be able to parse an HTTP Accept-Language header...