CVE-2021-46325: Out-of-bounds Write

Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf...

PT-2022-12638

Name of the Vulnerable Software and Affected Versions Espruino version 2v11.251 Description A stack buffer overflow was discovered in Espruino via src/jsvar.c in the jsvNewFromString function. This issue allows for potential exploitation. Recommendations For Espruino version 2v11.251, consider...

CVE-2021-46324: Out-of-bounds Write

Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString...

CVE-2021-46323: Undefined Security Weakness

Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass...

PT-2022-12637

Name of the Vulnerable Software and Affected Versions Espruino version 2v11.251 Description A SEGV issue was discovered in Espruino via the jsiGetDeviceFromClass function in src/jsinteractive.c. Recommendations For Espruino version 2v11.251, consider restricting access to the jsiGetDeviceFromClas...

PT-2022-12639

Name of the Vulnerable Software and Affected Versions Espruino version 2v10.246 Description A stack buffer overflow was discovered in Espruino via src/jsutils.c in vcbprintf. Recommendations For Espruino version 2v10.246, at the moment, there is no information about a newer version that contains ...

PT-2022-4852

Name of the Vulnerable Software and Affected Versions vim/vim versions prior to 8.2 Description The issue is related to an out-of-bounds read in the vim text editor, specifically in the src/window.c component. This allows a remote attacker to access confidential data by exploiting the...

PT-2022-1729

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Description The issue is a heap-based buffer overflow in the vim repository. This overflow is caused by the block insert function in src/ops.c, which leads to a dynamic memory buffer overflow. An attacker could exploi...

in mruby/mruby

Description There is a NULL Pointer Dereference in preparesingletonclass src/class.c:360:13. This bug has been found on mruby lastest commit hash 171d32c0071d776207174a40a8fa26def3dbb931 on Ubuntu 20.04 for x8664/amd64. Proof of Concept 1.timesb= a=0 0,m:0 c=0=0,nil=nil0 def mend def c.eend Steps...

CVE-2022-0213

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-45832

A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c, which causes a Denial of Service context-dependent...

CVE-2021-45832: Uncontrolled Recursion

A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c, which causes a Denial of Service context-dependent...

CVE-2021-44168: Download of Code Without Integrity Check

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages...

roaring-landmask (0.4.0) potentially affected by CVE-2021-4044 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2021-4044 Source advisory: OSV:GHSA-MMJF-F5JW-W72Q...

CVE-2021-39183

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-sr...

CVE-2021-39183

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-sr...

CVE-2021-39183

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-sr...

Buffer overflow

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-sr...

CVE-2021-39312

The True Ranker plugin = 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the /admin/vendor/datatables/examples/resources/examples.php file...

roaring-landmask (0.4.0) potentially affected by CVE-2021-4044 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2021-4044 Source advisory: OSV:RUSTSEC-2021-0129...