115 matches found
Important: glib2
Issue Overview: A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the...
Fedora: Security Advisory (FEDORA-2025-bab973d0b9)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-13601
creationtimestamp| type| source ---|---|--- 2025-11-26 15:22:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115616682989079256 2025-11-26 16:33:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kbtungfi2s 2025-12-01 13:40:41+00:00| seen|...
AZL-71120 CVE-2025-13601 affecting package glib for versions less than 2.78.6-5
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...
CVE-2025-13601
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...
CVE-2025-13601
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...
MAL-2025-13601 Malicious code in @zalastax/nolb-random_ (npm)
The package @zalastax/nolb-random was found to contain malicious code...
CVE-2024-13601
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes i...
CVE-2024-13601
CVE-2024-13601 affects Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin for WordPress. Description: Insecure Direct Object Reference via exportusereraserequest in all versions up to 1.0.5, enabling authenticated users with Subscriber+ access to export ticket data for any us...
CVE-2024-13601 Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Authenticated (Subscriber+) Insecure Direct Object Reference
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.5 via the 'exportusereraserequest' function due to missing validation on a user controlled key. This makes i...
Design/Logic Flaw
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 49160. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...
CVE-2021-34857
Parallels Desktop 16.1.3 (49160) is affected by CVE-2021-34857 due to a Toolgate out-of-bounds write caused by insufficient input validation. This local privilege-escalation flaw allows an attacker able to execute high-privileged code on the guest to run arbitrary code in the hypervisor context. ...
CVE-2020-13601 Possible read out of bounds in dns read
Possible read out of bounds in dns read. Zephyr versions = 1.14.2, = 2.3.0 contain Out-of-bounds Read CWE-125. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-mm57-9hqw-qh44...
CVE-2020-13601
CVE-2020-13601 affects Zephyr RTOS, with an Out-of-bounds Read (CWE-125) in the DNS read path reported for Zephyr versions >= 1.14.2 and >= 2.3.0. The public entries indicate a network-based issue with potential for high impact (CVSS v3.1: CRITICAL, 9.8; CVSS v2: 7.5) and a high-severity co...
CVE-2018-13601
CVE-2018-13601 affects the GalacticX Ethereum token. The mintToken function has an integer overflow that lets the contract owner set an arbitrary user balance to any value. The vulnerability is described in NVD data, with CVSS v3 base score 7.5 (HIGH) and impact on integrity. No exploitation deta...