SUSE CVE-2018-19490

An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in dfgenerateasciiarrayentry. To exploit this vulnerability, an attacker must pass an overlong string as the right bound of the range...

sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API

An array-bounds overflow vulnerability was discovered in SQLite. The vulnerability occurs when handling an overly large input passed as a string argument to some of the C-language APIs provided by SQLite. This flaw allows a remote attacker to pass specially crafted large input to the application...

CVE-2022-48279

CVE-2022-48279 affects ModSecurity; HTTP multipart requests could bypass the Web Application Firewall in versions before 2.9.6 and in 3.x before 3.0.8. Connected sources show patched releases (2.9.6+, 3.0.8+) and downstream updates (Debian, Fedora, Amazon Linux, etc.). No exploit details are prov...

SQLite report about CVE-2023-7104

This is a bug in the session extension of SQLite, not in the SQLite core. This bug is only reachable by applications that recompile SQLite using the -DSQLITEENABLESESSION compile-time option and then use the Session C-language APIs to process a changeset that has been subtly corrupted by an...

CVE-2022-23547

CVE-2022-23547 is a vulnerability in the pjproject/PJSIP stack used by Ring and related components. It describes a possible buffer overread when parsing a STUN message. Affected products/areas: embedded pjproject components in Ring (PJSIP/PJNATH/PJSUA-LIB use), with the issue arising during STUN ...

Onion 安全漏洞

Onion http server library is a C library from the personal developer David Moreno Montero. It is used to create simple HTTP servers and web applications. A security vulnerability exists in Onion, which stems from an affected onionresponseflush function in the src/onion/response.c file in the...

CLSA-2022-1668118023 Fix CVE(s): CVE-2022-35737

SECURITY UPDATE: array-bounds overflow if billions of bytes are used in a string argument to a C API - debian/patches/CVE-2022-35737.patch: increase the size of loop variables in the printf implementation to avoid overflow. - CVE-2022-35737...

GLSA-202210-37 : PJSIP: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-37 PJSIP: Multiple Vulnerabilities - PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP before...

libxml2 输入验证错误漏洞

libxml2 is an open source library used to parse XML documents . It is written in C and can be called by many languages, such as C, C++, XSH. An input validation error vulnerability exists in libxml2. No information about this vulnerability is available at this time, please stay tuned to CNNVD or...

The vulnerability of C and C++ garbage collectors using Boehm-Demers-Weiser GC allows a intruder to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of garbage collectors in C and C++ languages, such as Boehm-Demers-Weiser GC, involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and ev...

PBC 安全漏洞

PBC is a Google Protocol Buffer Library for C from the individual developers at cloudwu in China. A denial of service vulnerability exists in PBC 2022-8-27 and prior versions, which stems from a segmentation error in the PBCwmessageinteger function in src/wmessage.c:137. An attacker could exploit...

OTFCC 安全漏洞

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC has a security vulnerability that stems from a segmentation violation located at its /lib/x8664-linux-gnu/libc.so.6 0xbb384. No detailed vulnerability details are currently available...

AZL-10467 CVE-2022-35737 affecting package sqlite for versions less than 3.39.2-1

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API...

UltraJSON 安全漏洞

UltraJSON is an open source, ultra-fast JSON encoder and decoder written in pure C and bundled with Python 3.7+. A security vulnerability exists in versions of UltraJSON prior to 5.4.0, which stems from an inability to properly decode certain characters, allowing for potential key obfuscation and...

The vulnerability of microprogrammed software in PACsystems programmable logic controllers, related to insufficient verification of data authenticity, allows a intruder to execute arbitrary code.

The vulnerability of microprogrammed programmable logic controllers from PACsystems is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code using a specially crafted file written in...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52252)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

GNU LibreDWG Stack Overflow Vulnerability

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a stack overflow vulnerability, for which no detailed vulnerability details are currently available...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52257)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

GNU LibreDWG Double Release Vulnerability (CNVD-2022-52258)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a double-release vulnerability, for which no detailed vulnerability details are currently available...

libredwg 资源管理错误漏洞

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a resource management error, and no details of the vulnerability are currently available...