2559 matches found
The vulnerability of the JetBrains Kotlin programming language interpreter arises from incorrect default access rights settings, allowing attackers to exploit the system to disclose protected information.
The vulnerability of the JetBrains Kotlin programming language interpreter is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...
CVE-2022-31207
The Omron SYSMAC Cx product family PLCs CS series, CJ series, and CP series through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS 9600/TCP protocol for engineering purposes, including downloading projects and control logic to the PLC. This protocol has authentication...
The vulnerability of the implementation of the singlevar() function in the Lua interpreter allows a hacker to execute arbitrary code.
The vulnerability of the singlevar function implementation in Lua interpreters is related to a buffer out-of-bound read error in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
The vulnerability of the `hash_new_from_values()` function in the Ruby Mruby interpreter allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the hashnewfromvalues function in the Ruby Mruby interpreter is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...
Vulnerability of the njs_value_own_enumerate() function (src/njs_value.c) in the njs interpreter of the nginx server, allowing a hacker to execute arbitrary code
The vulnerability of the njsvalueownenumerate function src/njsvalue.c in the njs interpreter of the nginx server is related to the execution of an operation outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Vulnerability of the njs_utf8_next() function (src/njs_utf8.h) in the njs interpreter of the nginx server, allowing a attacker to execute arbitrary code
The vulnerability of the njsutf8next function src/njsutf8.h in the njs interpreter of the nginx server is related to the execution of an operation outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Vulnerability of the njs_value_property() function (njs_value.c) in the njs interpreter of the nginx server, allowing a hacker to execute arbitrary code
The vulnerability of the njsvalueproperty function njsvalue.c in the njs interpreter of the nginx server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Vulnerability of the njs_djb_hash() function (src/njs_djb_hash.c) in the njs interpreter of the nginx server, allowing a hacker to execute arbitrary code
The vulnerability of the njsdjbhash function src/njsdjbhash.c in the njs interpreter of the nginx server is related to the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the njs_vmcode_interpreter function (src/njs_vmcode.c) in the njs interpreter of the nginx server allows a hacker to cause a service failure.
The vulnerability of the njsvmcodeinterpreter function src/njsvmcode.c in the njs interpreter of the nginx server involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
CVE-2021-44170
A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...
Stack overflow
A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...
CVE-2021-44170
A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...
PT-2022-3708 · Nginx · Nginx Njs
Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.4 Description: The issue is related to a buffer overflow in the njs value property function of the njs interpreter in the Nginx server. This could allow a remote attacker to execute arbitrary code. The problem is caused ...
[SECURITY] Fedora 35 Update: golang-mvdan-sh-3-3.4.3-4.fc35
A shell parser, formatter, and interpreter. Supports POSIX Shell, Bash, and mksh...
The vulnerability of the njs_value_own_enumerate() function in the njs interpreter of the nginx server allows a hacker to cause a service failure.
The vulnerability of the njsvalueownenumerate function in the njs interpreter of the nginx server is related to the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Protect
A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS and FortiProxy may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...
The vulnerability of the mysqlnd/pdo function (mysqlnd_wireprotocol.c) in the PHP programming language interpreter allows a hacker to execute arbitrary code.
The vulnerability of the mysqlnd/pdo function mysqlndwireprotocol.c in the PHP programming language interpreter is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
[SECURITY] Fedora 35 Update: python3-docs-3.10.5-1.fc35
The python3-docs package contains documentation on the Python 3 programming language and interpreter...
Nginx 资源管理错误漏洞
Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx Inc. in the United States. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS version v0.7.2, which stems from a...