4338 matches found
CVE-2024-5826: Improper Control of Generation of Code
In the latest version of vanna-ai/vanna, the vanna.ask function is vulnerable to remote code execution due to prompt injection. The root cause is the lack of a sandbox when executing LLM-generated code, allowing an attacker to manipulate the code executed by the exec function in...
CVE-2024-39130: NULL Pointer Dereference
A NULL Pointer Dereference discovered in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function DumpOneStream at /src/DumpStream.cpp...
CVE-2024-6063
A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmxonevent of the file src/filters/dmxm2ts.c of the component MP4Box. The manipulation leads to null pointer dereference. An attack has to be approached locally...
CVE-2024-36582
alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...
CVE-2024-6062: NULL Pointer Dereference
A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue is the function swfsvgaddisosample of the file src/filters/loadtext.c of the component MP4Box. The manipulation leads to null pointer dereference. The attack needs to be...
PT-2024-27081 · Alexbinary · Object-Deep-Assign
Name of the Vulnerable Software and Affected Versions: alexbinary object-deep-assign version 1.0.11 Description: The issue concerns a Prototype Pollution vulnerability via the extend method of Module.deepAssign, located in /src/index.js. Recommendations: For alexbinary object-deep-assign version...
CVE-2024-35326
CVE-2024-35326 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2024-37877: Out-of-bounds Read
UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occurs in function readOctetString in src/utils/octetview.cpp and in function DecodeRlsMessage in src/lib/rls/rlspdu.cpp...
CVE-2024-36760: Buffer Copy without Checking Size of Input
A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...
CVE-2023-51847
An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoapcontextt function in the src/coapthreadsafe.c:297:3 component...
CVE-2024-24199
smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c...
CVE-2024-24198
smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c...
CVE-2023-51847: Uncontrolled Resource Consumption
An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoapcontextt function in the src/coapthreadsafe.c:297:3 component...
CVE-2024-24194: NULL Pointer Dereference
robdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item-tokens component at /src/conf-parse.c...
PT-2024-20316
Name of the Vulnerable Software and Affected Versions smartdns version 54b4dc Description A misaligned address was discovered at smartdns/src/dns.c in smartdns commit 54b4dc. Recommendations For smartdns version 54b4dc, update to a version that fixes the misaligned address issue. At the moment,...
PT-2024-20315
Name of the Vulnerable Software and Affected Versions smartdns version 54b4dc Description A misaligned address was discovered at smartdns/src/util.c in smartdns commit 54b4dc. Recommendations For version 54b4dc, consider updating to a newer version that addresses the misaligned address issue at...
CVE-2024-24198: Undefined Security Weakness
smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c...
smartdns security vulnerability
SmartDNS is a DNS server running locally by Nick Peng Personal Developer. A security vulnerability exists in smartdns, which stems from the inclusion of an unaligned address in smartdns/src/util.c. The vulnerability is caused by the inclusion of an unaligned address in smartdns/src/util.c...
PT-2024-40437
Name of the Vulnerable Software and Affected Versions Typo3 affected versions not specified Description The issue concerns the exposure of sensitive directories to the publicly accessible document root. It is recommended to configure a dedicated web folder in composer-managed installations and...