CLSA-2023-1688675103 git: Fix of CVE-2023-25815

CVE-2023-25815: gettext: avoid using gettext if the locale dir is not present...

CLSA-2023-1688673526 git: Fix of CVE-2023-25815

CVE-2023-25815: gettext: avoid using gettext if the locale dir is not present...

The vulnerability of the microprogramming software of the TP-Link TL-WPA7510 network adapter lies in the ability to write data beyond the buffer in memory, allowing a hacker to execute arbitrary commands.

The vulnerability of the TP-Link TL-WPA7510 network adapter’s microprogramming software lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the /admin/locale parameter...

Moment.js: Path traversal in moment.locale

A path traversal vulnerability was found in Moment.js that impacts npm server users. This issue occurs if a user-provided locale string is directly used to switch moment locale, which an attacker can exploit to change the correct path to one of their choice. This can result in a loss of integrity...

SUSE CVE-2019-10714

LocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0.8-32 allows out-of-bounds access, leading to a SIGSEGV...

CVE-2023-29562

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...

CVE-2023-29562

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...

Stack overflow

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...

CVE-2023-29562

The CVE-2023-29562 entry concerns the TP-Link TL-WPA7510 (EU) V2 190125. A stack overflow is triggered via the operation parameter at the /admin/locale API endpoint. Public descriptions consistently identify this as a memory buffer overflow with potential to impact confidentiality, integrity, and...

CVE-2023-29562: Out-of-bounds Write

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...

CVE-2023-29562

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...

SUSE CVE-2023-25815

In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW-packages, the gettext function's implicit initialization no...

ALPINE-CVE-2023-25815

In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW-packages, the gettext function's implicit initialization no...

CVE-2023-25815 Git looks for localized messages in the wrong place

In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW-packages, the gettext function's implicit initialization no...

UBUNTU-CVE-2023-25815

In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW-packages, the gettext function's implicit initialization no...

CVE-2023-21091

In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission check. This could lead to local denial of service across user boundaries with no additional execution privileges needed. User interaction is not needed for...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which stems from a lack of permission checking in the canDisplayLocalUi of the AppLocalePickerActivity.java component, which can be exploited by an attacker to cau...

Medium: babel

Issue Overview: Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution. CVE-2021-42771 Affected Packages: babel Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

ASB-A-257954050

In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission check. This could lead to local denial of service across user boundaries with no additional execution privileges needed. User interaction is not needed for...

SUSE: Security Advisory (SUSE-SU-2023:0579-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...