The vulnerability of the command-line interface of FortiOS operating systems and the FortiProxy proxy server, related to the use of uncontrolled format strings, allows attackers to execute arbitrary code.

The vulnerability of the command-line interface of FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to the use of uncontrolled format strings. Exploiting this vulnerability allows a attacker to execute arbitrary code using specially...

AZL-34639 CVE-2023-39129 affecting package crash for versions less than 8.0.4-3

GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap use after free via the function addpeexportedsym at /gdb/coff-pe-read.c...

DEBIAN-CVE-2023-39129

GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap use after free via the function addpeexportedsym at /gdb/coff-pe-read.c...

Path traversal

Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format. This allows an attacker to create or overwrite arbitrary files, depending on the privileges of...

CVE-2023-38745

Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format. This allows an attacker to create or overwrite arbitrary files, depending on the privileges of...

Exploit for Use of Externally-Controlled Format String in Asus Rt-Ac86U_Firmware

CVE-2023-35086-POC July 25 2023, Altin tin-z, github.com/t...

CVE-2023-38745

Pandoc-era vulnerability set affects Pandoc up to 3.1.6. CVE-2023-38745: before 3.1.6, an arbitrary file write is possible when processing crafted image elements with --extract-media or PDF output, depending on process privileges. Root cause ties to an incomplete/adjusted handling of paths and do...

Debian dla-3507 : libghc-pandoc-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3507 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3507-1 [email protected]...

GNU gdb 资源管理错误漏洞

GNU gdb is a program debugging tool developed by the GNU open source organization that supports C, C++, Go, Fortran and many other programming languages. GNU gdb suffers from a post-release reuse vulnerability that originates from a confusion in the instruction responsible for freeing memory in t...

CVE-2023-38745

Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format. This allows an attacker to create or overwrite arbitrary files, depending on the privileges of...

GHSA-V5FW-Q4PF-8P2H Duplicate Advisory: Open Babel has out-of-bounds write in Gaussian translationVectors[]

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jg3h-pv7c-4f9c. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple...

GHSA-WJ42-V2P3-FQ2W Duplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5rff-8f7c-8jmw. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and...

Duplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p594-7xw4-g76p. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master comm...

GHSA-HRVG-GX3J-WH53 Duplicate Advisory: Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-55f6-pf8r-c2f4. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple...

GHSA-VX29-RWGR-834P Duplicate Advisory: Open Babel has out-of-bounds write in PQS coord_file parser

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f29h-2h58-48r7. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the PQS format coordfile functionality of Open Babel 3.1.1 and master...

GHSA-7RCM-W6FF-J43W Duplicate Advisory: Open Babel has uninitialized pointer dereference in PQS pFormat

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8qxc-57hf-hc9j. This link is maintained to preserve external references. Original Description A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and...

GHSA-H632-QVV7-2623 Duplicate Advisory: Open Babel has uninitialized pointer dereference in GRO residue parser

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mw5r-wq2m-397c. This link is maintained to preserve external references. Original Description A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and maste...

GHSA-QGHV-8H77-699V Duplicate Advisory: Open Babel has out-of-bounds write in MOL2 attribute/value parser

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vjg6-gm8m-v5g6. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1...

GHSA-JRJJ-9H77-6VHV Duplicate Advisory: Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mjmg-352j-f456. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple...

GHSA-4R3Q-94WC-XHQ9 Duplicate Advisory: Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7h6r-6p76-68c9. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple...