24505 matches found
Format string
On Triangle MicroWorks' SCADA Data Gateway version = v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway to perform unrestricted memory reads.An unauthenticated user can use this format string...
CVE-2023-2186
CVE-2023-2186 affects Triangle MicroWorks SCADA Data Gateway
Triangle MicroWorks SCADA Data Gateway 格式化字符串错误漏洞
Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. A formatting string error vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by an attacker to execute arbitrary code and gain host privileges...
UBUNTU-CVE-2023-29499
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service...
Reportlab 安全漏洞
ReportLab is an open source engine for creating data-driven PDF documents and custom vector graphics from ReportLab, Denmark. A security vulnerability exists in Reportlab v3.6.12 and earlier versions, which stems from a vulnerability that allows an attacker to execute arbitrary code by supplying ...
SUSE CVE-2023-29499
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service...
CVE-2023-3044
An excessively large PDF page size found in fuzz testing, unlikely in normal PDF files can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate...
UBUNTU-CVE-2023-3044
An excessively large PDF page size found in fuzz testing, unlikely in normal PDF files can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate...
CVE-2023-33761
eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /view/cb/format642.php...
CVE-2023-33761
eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /view/cb/format642.php...
PT-2023-24478 · Emedia Consulting · Simpleredak
Name of the Vulnerable Software and Affected Versions: eMedia Consulting simpleRedak versions up to 2.47.23.05 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability can be exploited via the /view/cb/format 642.php component. Recommendations: F...
ALPINE-CVE-2023-32324
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers to cause a DoS ...
CVE-2023-32324 OpenPrinting CUPS vulnerable to heap buffer overflow
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers to cause a DoS ...
UBUNTU-CVE-2023-32324
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers to cause a DoS ...
[SECURITY] Fedora 37 Update: editorconfig-0.12.6-1.fc37
EditorConfig makes it easy to maintain the correct coding style when switching between different text editors and between different projects. The EditorConfig project maintains a file format and plugins for various text editors which allow this file format to be read and used by those editors...
SUSE CVE-2023-2931
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...
CVE-2023-33730
Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format...
openssl: double free after calling PEM_read_bio_ex
A double-free vulnerability was found in OpenSSL's PEMreadbioex function. The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" for example, "CERTIFICATE", any header data, and the payload data. If the function succeeds, then the "nameout," "header," and "data"...
CVE-2023-33730
Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format...