The vulnerability of the standard C++ library for Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the standard C++ library for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

OESA-2023-1726 grpc security update

gRPC is a modern open source high performance RPC framework that can run in any environment. It can efficiently connect services in and across data centers with pluggable support for load balancing, tracing, health checking and authentication. It is also applicable in last mile of distributed...

PT-2023-6251 · Apache +6 · Xerces-C++ +6

Name of the Vulnerable Software and Affected Versions: xerces-c++ version 3.2.3 Description: The issue is caused by an integer overflow in xerces-c++ that allows remote attackers to cause out-of-bound access via an HTTP request. This can potentially allow a remote attacker to execute arbitrary co...

Microsoft Common Data Model SDK Security Vulnerability

Microsoft Common Data Model SDK is a software application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Common Data Model SDK. An attacker could exploit this vulnerability to cause a denial of service. The following products and versions are affected: Microsoft Comm...

OESA-2023-1682 grpc security update

gRPC is a modern open source high performance RPC framework that can run in any environment. It can efficiently connect services in and across data centers with pluggable support for load balancing, tracing, health checking and authentication. It is also applicable in last mile of distributed...

GHSA-P25M-JPJ4-QCRR Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

DEBIAN-CVE-2023-4785

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

AZL-34772 CVE-2023-4785 affecting package grpc for versions less than 1.62.0-2

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

UBUNTU-CVE-2023-4785

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

PT-2023-30643

Name of the Vulnerable Software and Affected Versions gRPC versions 1.23 and later Description The issue is related to a lack of error handling in the TCP server in Google's gRPC, which allows an attacker to cause a denial of service by initiating a significant number of connections with the...

GCC Security Vulnerabilities

GCC is a collection of GNU compilers. It is primarily used to compile the C and C++ languages. A security vulnerability exists in GCC, which stems from the presence of a buffer overflow that could lead to an uncontrolled loss of availability or further compromise confidentiality or integrity...

Vulnerability of PHP, C++, Swift, and Node.js drivers of the MongoDB database management system, related to the exposure of protected information, allowing attackers to gain unauthorized access to protected information.

Vulnerabilities in PHP, C++, Swift, and Node.js drivers of the MongoDB database management system, as well as the PHP programming language interpreter, can lead to the exposure of protected information. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected...

USN-6307-1 cjose vulnerability

It was discovered that JOSE for C/C++ AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE. An attacker could use this to cause a denial of service system crash or might expose sensitive information...

PT-2023-21750 · Tigergraph · Tigergraph Enterprise

Name of the Vulnerable Software and Affected Versions: Tigergraph Enterprise version 3.7.0 Description: An issue was discovered in the TigerGraph platform, which allows users to define new User Defined Functions UDFs from C/C++ code. This functionality enables users to upload custom C/C++ code,...

PT-2023-4885

Name of the Vulnerable Software and Affected Versions gRPC versions prior to v1.53 Description The issue is related to the gRPC C++ implementation, where certain headers can cause an abort to be called when sent via http2. The affected headers include te: x where x is not trailers, :scheme: x whe...

cpp-httplib 注入漏洞

cpp-httplib is an HTTP/HTTPS server and client library written in C++. A security vulnerability exists in cpp-httplib versions prior to 0.12.4 that stems from vulnerability to CRLF injection, which can lead to logic errors and other misbehavior...

DEBIAN-CVE-2023-31038

SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to the database were properly escaped for SQL injection. This has been the case since at least version 0.9.0released 2003-08-06 Note that Log4cxx is a C++ framework, so only C++ applications...

Unified Automation OPC UA C++Demo Server 安全漏洞

Unified Automation OPC UA C++Demo Server is a machine-to-machine communication protocol application for industrial automation from Unified Automation. A security vulnerability exists in Unified Automation OPC UA C++ Demo Server version 1.7.6-537, which stems from a crafted OPC UA message that can...

Unified Automation OPC UA C++ Demo Server 安全漏洞

Unified Automation OPC UA C++Demo Server is a machine-to-machine communication protocol application for industrial automation from Unified Automation. A security vulnerability exists in Unified Automation OPC UA C++ Demo Server version 1.7.6-537, which stems from a crafted certificate that can...

PT-2023-12847 · Intel · Intel Oneapi Toolkit +1

Name of the Vulnerable Software and Affected Versions: IntelR C++ Compiler Classic versions prior to 2021.6 IntelR oneAPI Toolkits versions prior to 2022.2 Description: The issue is related to improper handling of Unicode encoding in source code compiled by the IntelR C++ Compiler Classic. This m...