12165 matches found
CVE-2023-30406
CVE-2023-30406 affects JerryScript, specifically the commit 1a2c047, where a segmentation fault occurs in ecma_find_named_property at /base/ecma-helpers.c. Documented impact: availability impact HIGH; CVSS base score 5.5 (MEDIUM) with LOCAL/LOW/NO-USER interaction details. Exploitation status and...
CVE-2023-30406
Removed by vendor...
Amazon Linux 2 : ImageMagick (ALAS-2023-2014)
The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2014 advisory. A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation...
Medium: ImageMagick
Issue Overview: A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulti...
Payment giant's point-of-sale outage caused by ALPHV ransomware
On April 12, 2023, payment giant NCR reported it was looking into an issue with its point-of-sale POS systems that caused an outage, leaving customers unable to use the system. The NCR Aloha POS systems are popular in hospitality services. Customers include Wendys, Chuck e Cheese, Cafe Rio, Leean...
GHSA-FJX5-QPF4-XJF2 Parsing borsh messages with ZST which are not-copy/clone is unsound
Affected versions of borsh cause undefined behavior when zero-sized-types ZST are parsed and the Copy/Clone traits are not implemented/derived. For instance if 1000 instances of a ZST are deserialized, and the ZST is not copy this can be achieved through a singleton, then accessing/writing to...
Parsing borsh messages with ZST which are not-copy/clone is unsound
Affected versions of borsh cause undefined behavior when zero-sized-types ZST are parsed and the Copy/Clone traits are not implemented/derived. For instance if 1000 instances of a ZST are deserialized, and the ZST is not copy this can be achieved through a singleton, then accessing/writing to...
Security Bulletin: Vulnerabilities in OpenSSL affect QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for BladeCenter
Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for BladeCenter. QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for BladeCenter have addressed the applicable...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Kamailio vulnerabilities (USN-6022-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6022-1 advisory. It was discovered that Kamailio did not properly sanitize SIP messages under certain circumstances. An attacker could use this...
CVE-2023-27772
libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClientsetOrigin at /client/clientcontrol.c...
Design/Logic Flaw
libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClientsetOrigin at /client/clientcontrol.c...
CVE-2023-27772
libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClientsetOrigin at /client/clientcontrol.c...
CVE-2023-27772
libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClientsetOrigin at /client/clientcontrol.c...
Huawei EulerOS: Security Advisory for e2fsprogs (EulerOS-SA-2023-1592)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mz Automation Libiec61850 代码问题漏洞
Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. A security vulnerability exists in Mz Automation libiec61850 version v1.5.1, which stems from the ControlObjectClientsetOrigin function via /client/clientcontrol.c found to contain a segmentation...
EulerOS 2.0 SP8 : e2fsprogs (EulerOS-SA-2023-1592)
According to the versions of the e2fsprogs packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code...
CVE-2023-27772
CVE-2023-27772 affects libiec61850 v1.5.1. A segmentation violation is triggered in the function ControlObjectClient_setOrigin() located in /client/client_control.c, as described by multiple feeds. The vulnerability stems from this specific control object origin-setting path and results in a cras...
PT-2023-21339 · Unknown · Libiec61850
Name of the Vulnerable Software and Affected Versions: libiec61850 version 1.5.1 Description: A segmentation violation issue was discovered in the function ControlObjectClient setOrigin at /client/client control.c. Recommendations: For libiec61850 version 1.5.1, consider disabling the...
