CVE-2022-44318

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...

PT-2022-27182 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall. This issue affects PicoC and is related to the StringStrcat function, which ...

CVE-2022-44312

CVE-2022-44312 affects PicoC version 3.2.2, with a heap buffer overflow in the ExpressionCoerceInteger function (expression.c) when invoked via ExpressionInfixOperator. The issue is documented across multiple sources and has a CVSSv3.1 base score of 5.5 (Medium, Local, Availability impact). A pat...

CVE-2022-44318

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall...

CVE-2022-44316

PicoC 3.2.2 is affected by a heap buffer overflow in LexGetStringConstant (lex.c) when invoked via LexScanGetToken. This CVE (CVE-2022-44316) is documented across multiple sources (NVD, Red Hat, OSV, CNNVD, etc.). The issue arises within the LexGetStringConstant routine and results in a high impa...

CVE-2022-44313

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in expression.c when called from ExpressionParseFunctionCall...

CVE-2022-44317

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCall...

CVE-2022-44320

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctionCall...

CVE-2022-44321

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment function in lex.c when called from LexScanGetToken...

WordPress Salat Times plugin <= 3.2.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in the WordPress Salat Times plugin versions = 3.2.2. Solution Update the WordPress Salat Times plugin to the latest available version at least 3.2.2...

Apache Couchdb Erlang RCE

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. Module Options msf use exploit/multi/http/apachecouchdberlangrce msf exploitapachecouchdberlangrce show targets ...targets... msf...

PT-2022-24881 · Unknown +1 · Passport-Saml +1

Name of the Vulnerable Software and Affected Versions: Passport-SAML versions prior to 3.2.2 node-saml versions prior to 4.0.0-beta.5 Description: A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in...

OESA-2022-1964 mod_security_crs security update

The base rules are provided for modsecurity by this package. Security Fixes: The OWASP ModSecurity Core Rule Set CRS is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple character encoding schemes. A vulnerable back-end...

DEBIAN-CVE-2022-39957

The OWASP ModSecurity Core Rule Set CRS is affected by a response body bypass. A client can issue an HTTP Accept header field containing an optional "charset" parameter in order to receive the response in an encoded form. Depending on the "charset", this response can not be decoded by the web...

DEBIAN-CVE-2022-39956

The OWASP ModSecurity Core Rule Set CRS is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a character encoding scheme via the Content-Type or the deprecated Content-Transfer-Encoding multipart MIME header fields that will not be decoded and...

UBUNTU-CVE-2022-39957

The OWASP ModSecurity Core Rule Set CRS is affected by a response body bypass. A client can issue an HTTP Accept header field containing an optional "charset" parameter in order to receive the response in an encoded form. Depending on the "charset", this response can not be decoded by the web...

Design/Logic Flaw

Apache Hadoop's FileUtil.unTarFile, File API does not escape the input file name before being passed to the shell. An attacker can inject arbitrary commands. This is only used in Hadoop 3.3 InMemoryAliasMap.completeBootstrapTransfer, which is only ever run by a local user. It has been used in...

PicoC 代码问题漏洞

PicoC is a lightweight C interpreter. A denial of service vulnerability exists in PicoC v3.2.2, which stems from the discovery of a NULL pointer dereference at variable.c. The vulnerability can be exploited to cause a denial of service attack. An attacker could exploit this vulnerability to cause...

PT-2022-22203 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A NULL pointer dereference was discovered in the variable.c file. Recommendations: For PicoC version 3.2.2, at the moment, there is no information about a newer version that contains a fix for this vulnerabili...

Northern.tech Mender 安全漏洞

Northern.tech Mender Enterprise is a wireless update manager for IoT devices from Northern.tech. A security vulnerability exists in Northern.tech Mender versions 3.2.0, 3.2.1, and 3.2.2, which stems from having incorrect access control, where any client on the same network can connect to this TCP...