Medium: python3-idna

Issue Overview: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 Affected Packages: python3-idna Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...

CVE-2024-48510

Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2024-11124

A vulnerability has been found in TimGeyssens UIOMatic 5 and classified as critical. This vulnerability affects unknown code of the file /src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-11124: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in TimGeyssens UIOMatic 5 and classified as critical. This vulnerability affects unknown code of the file /src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-52286

Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. In affected versions the Merge functionality takes untrusted user input file name and uses it directly in the creation of HTML pages allowing any unauthenticated to execute JavaScript code...

CVE-2024-52286: Improper Input Validation

Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. In affected versions the Merge functionality takes untrusted user input file name and uses it directly in the creation of HTML pages allowing any unauthenticated to execute JavaScript code...

CVE-2024-35422

vmir e8117 was discovered to contain a heap buffer overflow via the wasmcall function at /src/vmirwasmparser.c...

CVE-2024-35425

vmir e8117 was discovered to contain a segmentation violation via the functionprepareparse function at /src/vmirfunction.c...

CVE-2024-35422: Buffer Copy without Checking Size of Input

vmir e8117 was discovered to contain a heap buffer overflow via the wasmcall function at /src/vmirwasmparser.c...

CVE-2024-35423

vmir e8117 was discovered to contain a heap buffer overflow via the wasmparsesectionfunctions function at /src/vmirwasmparser.c...

CVE-2024-35422

vmir e8117 was discovered to contain a heap buffer overflow via the wasmcall function at /src/vmirwasmparser.c...

CVE-2024-35421

vmir e8117 was discovered to contain a segmentation violation via the wasmparseblock function at /src/vmirwasmparser.c...

CVE-2024-35425

vmir e8117 was discovered to contain a segmentation violation via the functionprepareparse function at /src/vmirfunction.c...

CVE-2024-35423

vmir e8117 was discovered to contain a heap buffer overflow via the wasmparsesectionfunctions function at /src/vmirwasmparser.c...

CVE-2024-35427

vmir e8117 was discovered to contain a segmentation violation via the exportfunction function at /src/vmirwasmparser.c...

CVE-2024-35422

vmir e8117 was discovered to contain a heap buffer overflow via the wasmcall function at /src/vmirwasmparser.c...

CVE-2024-35421

vmir e8117 was discovered to contain a segmentation violation via the wasmparseblock function at /src/vmirwasmparser.c...

PT-2024-26494 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir e8117 Description: A segmentation violation issue was discovered in vmir via the function prepare parse function located at /src/vmir function.c. Recommendations: For vmir e8117, as a temporary workaround, consider disabling the function...

CVE-2024-35423

The vmir standalone library (version e8117 ) contains a heap buffer overflow vulnerability within the wasm_parse_section_functions function located at /src/vmir_wasm_parser.c. This flaw can be triggered when processing specific sections, potentially leading to an out-of-bounds read as indicated b...

CVE-2024-35426

The vmir standalone library (version e8117 ) contains a stack overflow vulnerability within the init_local_vars function located at /src/vmir_wasm_parser.c. This issue allows for potential exploitation of the software. To mitigate the risk, it is recommended to disable the init_local_vars functio...