CVE-2024-50569

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...

CVE-2024-50567

An improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...

CVE-2024-50567

An improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...

Fortinet FortiWeb OS Command Injections (FG-IR-24-438)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-24-438 advisory. - A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.0...

DEBIAN-CVE-2024-57699

A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service DoS. This issue exists because of an incomplete fix for...

CVE-2024-54181

IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using specially crafted input, the user could exploit this vulnerability to execute arbitrary code on the system...

frozen 安全漏洞

frozen is an open source JSON parser and generator for C/C++ from Cesanta Software. A security vulnerability exists in frozen prior to version 1.7, which stems from an unrestricted resource allocation. An attacker can exploit this vulnerability to cause components embedded in the library to crash...

CVE-2024-43708

CVE-2024-43708 relates to Kibana: an unthrottled resource allocation can cause a crash when handling crafted requests to /api/metrics/snapshot and other UI inputs. Affected are Kibana 7.x prior to 7.17.23 or 8.x prior to 8.15.0 (per scan/OSV entries). The root cause is unbounded resource consumpt...

CVE-2024-43708

An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted payload to a number of inputs in Kibana UI. This can be carried out by users with read access to any feature in Kibana...

BIT-PYTHON-MIN-2023-36632

The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed ...

Mattermost Mobile Apps 安全漏洞

Mattermost Mobile is a mobile application project, developed using the React Native framework, designed to provide a cross-platform iOS and Android client for Mattermost. Mattermost Mobile suffers from a denial of service vulnerability that stems from an inability to properly validate the proto...

GHSA-8J3Q-GC9X-7972 Mattermost Incorrect Type Conversion or Cast

Mattermost versions 10.2.x = 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the frontend via crafted malicious input...

Mattermost 代码问题漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a code issue vulnerability that stems from a failure to properly validate a proto style provided to an action style, which can be exploited by an attacker to crash the front-end...

PT-2026-2907

Name of the Vulnerable Software and Affected Versions vsftpd affected versions not specified Description A flaw exists in vsftpd that allows for a denial of service DoS. This is due to an integer overflow in the parsing of the ls command parameter, which can be triggered by a remote, authenticate...

PT-2026-3083

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A heap overflow exists in the ghi dmx declare opid bin function. This issue allows attackers to cause a Denial of Service DoS by providing a crafted input. Recommendations Update to a newer version that contains ...

PT-2025-49807

Name of the Vulnerable Software and Affected Versions Robocode version 1.9.3.6 Description An integer overflow issue exists in the write method of the Buffer class. The method does not correctly validate the length of data being written, which could allow attackers to cause a buffer overflow and...

PT-2025-50314

Name of the Vulnerable Software and Affected Versions GLib versions affected versions not specified Description A flaw exists in GLib Gnome Lib that allows a remote attacker to cause heap corruption. This can lead to a denial of service or potential code execution through a buffer-underflow in th...

CVE-2020-9080

There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. Vulnerability ID: HWPSIRT-2020-05272 This vulnerabilit...

CVE-2024-45338

A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service...

SUSE CVE-2024-45338

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...