RUSTSEC-2022-0049 Use after free in MacOS / iOS implementation

In iana-time-zone v0.1.43 a use-after-free bug in the MacOS / iOS implementation was introduced. The copied system time zone was released before its name was copied. If the system time zone was changed between the call of CFRelease and str::toowned, random memory would be copied...

Use after free in MacOS / iOS implementation

In iana-time-zone v0.1.43 a use-after-free bug in the MacOS / iOS implementation was introduced. The copied system time zone was released before its name was copied. If the system time zone was changed between the call of CFRelease and str::toowned, random memory would be copied...

PT-2022-37105

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash involves the functions mrb bint to s, mrb integer to str, and int to ...

PT-2022-37077

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 1 crash type. The crash state involves functions such as mrb bint new str, mrb vm exec, and mrb vm run. ...

PT-2022-36650

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves several functions: r str utf8 codepoint, r st...

PT-2022-37043

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions fr size from str, fr value box from substr, and fr value box from...

PT-2022-12154

Name of the Vulnerable Software and Affected Versions FIS GT.M versions prior to V7.0-000 Description The issue is related to a lack of parameter validation in calls to memcpy in the str tok function, located in the sr unix/ztimeoutroutines.c file, which is connected to the YottaDB code base. Thi...

DEBIAN-CVE-2022-1212

Use-After-Free in strescape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited...

UBUNTU-CVE-2022-1212

Use-After-Free in strescape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited...

PT-2022-13716

Name of the Vulnerable Software and Affected Versions mruby versions prior to 3.2 Description The issue is related to a Use-After-Free in the str escape function. This could potentially lead to arbitrary code execution if exploited. Recommendations For versions prior to 3.2, update to version 3.2...

CVE-2022-25406

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in deletequery.php via the DELETESTR parameter...

PT-2022-17268

Name of the Vulnerable Software and Affected Versions Tongda2000 version 11.10 Description A SQL injection issue was found in change box.php via the DELETE STR parameter. This allows for potential manipulation of database queries. Recommendations For Tongda2000 version 11.10, consider restricting...

PT-2022-17267

Name of the Vulnerable Software and Affected Versions Tongda2000 version 11.10 Description A SQL injection issue was found in delete.php via the DELETE STR parameter. This allows for potential manipulation of database queries. Recommendations For Tongda2000 version 11.10, as a temporary workaroun...

PT-2022-17269

Name of the Vulnerable Software and Affected Versions Tongda2000 version 11.10 Description A SQL injection issue was found in delete query.php via the DELETE STR parameter. Recommendations For Tongda2000 version 11.10, consider restricting access to the delete query.php file or avoiding the use o...

PT-2022-12766

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A global buffer overflow was discovered in Cesanta MJS via the c vsnprintf function at mjs/src/common/str util.c. Recommendations For Cesanta MJS version 2.20.0, consider updating to a newer version that...

PT-2021-30877

Name of the Vulnerable Software and Affected Versions Openssl version 0.9.8 Description The issue involves a heap out-of-bound read vulnerability in the rr frm str internal function and the ldns nsec3 salt data function. Additionally, there is a fixed time memory compare issue. Recommendations Fo...

PT-2021-27884

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 2. The crash state involves several functions: fr unix time from tm, fr unix...

PT-2021-27865

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 2. The crash state involves several functions: fr unix time from tm, fr unix...

PT-2021-27860

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash involves the functions fr base16 decode nstd, fr value box from str, and...

PT-2021-27842

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash involves several functions, including fr base16 decode nstd, fr value bo...