CVE-2024-37877: Out-of-bounds Read

UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occurs in function readOctetString in src/utils/octetview.cpp and in function DecodeRlsMessage in src/lib/rls/rlspdu.cpp...

CVE-2024-36760: Buffer Copy without Checking Size of Input

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...

CVE-2024-35326

CVE-2024-35326 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2023-51847

An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoapcontextt function in the src/coapthreadsafe.c:297:3 component...

CVE-2024-24199

smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c...

CVE-2024-24198

smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c...

PT-2024-20315

Name of the Vulnerable Software and Affected Versions smartdns version 54b4dc Description A misaligned address was discovered at smartdns/src/util.c in smartdns commit 54b4dc. Recommendations For version 54b4dc, consider updating to a newer version that addresses the misaligned address issue at...

CVE-2023-51847: Uncontrolled Resource Consumption

An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoapcontextt function in the src/coapthreadsafe.c:297:3 component...

CVE-2024-24194: NULL Pointer Dereference

robdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item-tokens component at /src/conf-parse.c...

CVE-2024-24198: Undefined Security Weakness

smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c...

smartdns security vulnerability

SmartDNS is a DNS server running locally by Nick Peng Personal Developer. A security vulnerability exists in smartdns, which stems from the inclusion of an unaligned address in smartdns/src/util.c. The vulnerability is caused by the inclusion of an unaligned address in smartdns/src/util.c...

PT-2024-20316

Name of the Vulnerable Software and Affected Versions smartdns version 54b4dc Description A misaligned address was discovered at smartdns/src/dns.c in smartdns commit 54b4dc. Recommendations For smartdns version 54b4dc, update to a version that fixes the misaligned address issue. At the moment,...

PT-2024-40437

Name of the Vulnerable Software and Affected Versions Typo3 affected versions not specified Description The issue concerns the exposure of sensitive directories to the publicly accessible document root. It is recommended to configure a dedicated web folder in composer-managed installations and...

Security Bulletin: openssl-src-300.2.1+3.2.0.crate is vulnerable to CVE-2024-0727, CVE-2023-6129, and CVE-2023-6237 used in IBM Maximo Application Suite - Edge Data Collector

Summary IBM Maximo Application Suite - Edge Data Collector uses openssl-src-300.2.1+3.2.0.crate which is vulnerable to CVE-2024-0727, CVE-2023-6129, and CVE-2023-6237 Vulnerability Details CVEID:CVE-2024-0727 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by improper input...

CVE-2024-35492

Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MQTT packet...

CVE-2024-35492: NULL Pointer Dereference

Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MQTT packet...

CVE-2023-1001

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

CVE-2023-1001

The CVE-2023-1001 entry concerns xuliangzhan vxe-table (up to 3.7.9) where the textarea.js export function inputValue is vulnerable to cross-site scripting. The vulnerability is exploitable remotely and is caused by improper handling of inputValue in the vxe-textarea component. Upgrade to version...

CVE-2023-1001: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

Mageia: Security Advisory (MGASA-2024-0181)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...