25462 matches found
CVE-2023-36260
CVE-2023-36260 affects the Feed Me plugin (version 4.6.1) on Craft CMS (version 4.6.1). The issue allows remote attackers to cause a Denial of Service by supplying crafted strings to the Feed-Me Name and Feed-Me URL fields when saving a feed via an Asset element with no volume selected. The root ...
Format string
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...
CVE-2023-40546 Shim: out-of-bounds read printing error messages
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...
mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_memsearch
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6450850780217344 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x603000000418...
lucene:QueryParserFuzzer: Security exception in java.base/java.nio.CharBuffer.wrap
Detailed Report: https://oss-fuzz.com/testcase?key=4689903417884672 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.CharBuffer.wrap...
PT-2024-13325
Name of the Vulnerable Software and Affected Versions Sane version 1.2.1 Description The issue is related to a heap bounds overwrite in the init options function from backend/test.c via a long init mode string in a configuration file. This is disputed because there is no expectation that test.c...
TONGDA Office Anywhere SQL Injection Vulnerability
TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 2017 version 11.9 and earlier versions, which stems from an incorrect operation of the parameter WEBBODYIDSTR that can lead to SQL injection...
CVE-2024-23985
EzServer 6.4.017 is affected by CVE-2024-23985, enabling a denial-of-service (daemon crash) via extremely long input strings (e.g., RNTO). CVSSv3.1: 7.5 (HIGH) with network access, no user interaction. Public references describe input-length-related DoS; Red Hat and other sources confirm the issu...
CVE-2024-23985: Undefined Security Weakness
EzServer 6.4.017 allows a denial of service daemon crash via a long string, such as one for the RNTO command...
Ezhometech EzServer Security Vulnerability
Ezhometech EzServer is an IPTV Interactive Internet Protocol Television streaming server from Ezhometech. A security vulnerability exists in Ezhometech EzServer version 6.4.017, which can be exploited to cause a denial of service via a long string...
CVE-2024-23902
creationtimestamp| type| source ---|---|--- 2024-01-24 19:27:08+00:00| seen| https://t.me/ctinow/173035 2024-02-18 10:12:25+00:00| seen| https://t.me/ctinow/187199...
CVE-2023-51888
Buffer Overflow vulnerability in the nomath function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL...
CVE-2023-51890
An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...
Buffer overflow
Buffer Overflow vulnerability in the nomath function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL...
Design/Logic Flaw
An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...
UBUNTU-CVE-2023-51890
An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...
CVE-2023-51888
Buffer Overflow vulnerability in the nomath function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL...
CVE-2023-51885
Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...