25644 matches found
Huawei EulerOS: Security Advisory for pkgconf (EulerOS-SA-2023-1876)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Zyxel NBG-418N Wi-Fi Router Uncontrolled Format String DoS
The vulnerability of the microprogrammed Wi-Fi router Zyxel NBG-418N v2 lies in the use of uncontrolled format strings when processing binary files. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending specially crafted packets...
c-ares: buffer overflow in config_sortlist() due to missing string length check
A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity...
kernel: mm/page_owner: use strscpy() instead of strlcpy()
In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use strscpy instead of strlcpy current-comm is not a string no guarantee for a zero byte in it. strlcpys1, s2, l is calling strlens2, potentially causing out-of-bound access, as reported by syzbot: detected buffer...
kernel: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf()
A flaw was found in the Linux kernel's Sound Open Firmware SOF Intel audio driver. A local user on a system equipped with affected Intel audio hardware could trigger improper handling of string formatting return values during error logging, leading to a potential buffer overflow. This vulnerabili...
PT-2023-22532 · Cesanta · Cesanta Mjs
Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.26 Description: A Buffer Overflow issue allows a local attacker to cause a denial of service via the mjs mk string function in mjs.c. This issue can be exploited to disrupt service. Recommendations: For Cesanta MJS versi...
Cesanta MJS buffer error vulnerability
Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS version v.1.26. An attacker has...
Distribution Security Vulnerabilities
Distribution is Distribution's individual developer's toolset for packaging, shipping, storing, and delivering content. A security vulnerability exists in Distribution that stems from allowing a malicious user to submit unreasonable values, resulting in the allocation of large arrays of strings...
PT-2023-8614
Name of the Vulnerable Software and Affected Versions XWiki Platform versions 2.2-milestone-1 through 14.4.7 XWiki Platform versions 14.4.8 through 14.10.3 XWiki Platform versions 14.10.4 through 15.0-rc-1 excluding 14.10.4 and 15.0-rc-1 Description The issue allows execution of javascript with t...
EulerOS 2.0 SP11 : pkgconf (EulerOS-SA-2023-1787)
According to the versions of the pkgconf package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in...
Huawei EulerOS: Security Advisory for pkgconf (EulerOS-SA-2023-1787)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for tcl (EulerOS-SA-2023-1728)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP11 : pkgconf (EulerOS-SA-2023-1765)
According to the versions of the pkgconf package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in...
EulerOS Virtualization 3.0.2.0 : tcl (EulerOS-SA-2023-1728)
According to the versions of the tcl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parti...
SUSE-SU-2023:2109-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upsteam tag jdk-11.0.19+7 April 2023 CPU: - CVE-2023-21930: Fixed AES support bsc1210628. - CVE-2023-21937: Fixed String platform support bsc1210631. - CVE-2023-21938: Fixed runtime support bsc1210632. - CVE-2023-21939: Fixed...
CVE-2023-21497
Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address...
Format string
Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address...
CVE-2023-21497: Use of Externally-Controlled Format String
Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address...
CVE-2023-21497
Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address...
PT-2023-18251 · Unknown · Mpos Tui Trustlet
Name of the Vulnerable Software and Affected Versions: mPOS TUI trustlet versions prior to SMR May-2023 Release 1 Description: The issue allows local attackers to access the memory address due to the use of an externally-controlled format string vulnerability in the mPOS TUI trustlet...