687 matches found
CVE-2021-45105
tejas-nagchandi/CVE-2021-45105 Replicating CVE-2021-45105 API curl -I localhost:8080/currentDateTime -H 'Time-Zone: GMT' Output: Attack curl -I localhost:8080/currentDateTime -H 'Time-Zone: $$::-$::-$$::-$' Output: Logs: Reference: https://vulners.com/cve/CVE-2021-45105...
Manage time zone settings in Outlook
Manage time zone settings in Outlook Applies To Outlook for Microsoft 365 Outlook 2024 Outlook 2016 Office 365 Small Business Outlook.com New Outlook for Windows Get help with Copilot How do I swap time zone positions? How do I add a second or third time zone? Get Copilot's help managing time zon...
Failed to connect to the worker service: "Alberta Standard Time" or "British Columbia Standard Time" was not recognized as a valid Windows time zone ID
Challenge After the Windows OS time zone of the Veeam Backup Server is changed to Alberta Standard Time, new and existing workers fail with the following error: Failed to connect to the worker service: "Alberta Standard Time" was not recognized as a valid Windows time zone ID Alternatively, after...
EUVD-2026-108546
A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file outside the intended zoneinfo directory...
CVE-2026-105265
A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file outside the intended zoneinfo directory...
CVE-2026-105265 Kiloview E3 NDI Encoder Path Traversal
A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file outside the intended zoneinfo directory...
CVE-2026-105265 Kiloview E3 NDI Encoder Path Traversal
A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file outside the intended zoneinfo directory...
CVE-2026-105265
The Kiloview E3 NDI Encoder is affected by a path traversal vulnerability (CWE-22) within its time zone parameter . Due to improper validation of user input, an authenticated user may cause the /etc/localtime file to point to a location outside the intended zoneinfo directory . The vulnerability ...
PT-2026-121668
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated user can exploit improper validation of the time zone parameter to cause the /etc/localtime file to point to a location outside the intended...
CLSA-2026-1791794851 sudo: Fix of CVE-2026-96512
CVE-2026-96512: remove TZ from sudo's own environment in main before tzset so NOTBEFORE/NOTAFTER sudoers checks use the system time zone...
CLSA-2026-1791564552 sudo: Fix of CVE-2026-96512
CVE-2026-96512: remove TZ from sudo's own environment in main before tzset so NOTBEFORE/NOTAFTER sudoers checks use the system time zone...
PT-2026-102934
Name of the Vulnerable Software and Affected Versions Ziroom ZHOME A0101 version 1.0.1.0 Description A flaw in the set time zone function within the '/api/ZRFirmware/set time zone' endpoint allows for remote command injection. This occurs through the manipulation of the hostname/zonename argument...
CLSA-2026-1788785362 postgresql: Fix of CVE-2026-14669
CVE-2026-14669: tochar: reject overlength time zone abbreviations instead of overflowing the format workspace upstream 12a620686 - bump leading Release 2 - 3 so the package outranks RHEL's postgresql:13 module rebuild 13.23-3.module+el8.10.0+24363+8e5fd2e3 RHSA-2026:28208, which otherwise wins...
CLSA-2026-1788785141 Fix CVE(s): CVE-2026-14669
SECURITY UPDATE: Heap buffer overflow in tochartimestamptz. DCHtochar copies the timezone abbreviation into a DCHMAXITEMSIZ-budgeted workspace with an unchecked strcpy, and any client can select a longer POSIX abbreviation via SET TIME ZONE CVSS 8.8, arbitrary code execution as the database OS...
CLSA-2026-1788603222 Fix CVE(s): CVE-2026-14669
SECURITY UPDATE: Heap buffer overflow in tochartimestamptz: DCHtochar copies the timezone abbreviation into a DCHMAXITEMSIZ-budgeted workspace with an unchecked strcpy, and any client can select a longer POSIX abbreviation via SET TIME ZONE CVSS 8.8, arbitrary code execution as the database OS us...
CLSA-2026-1788270629 Fix CVE(s): CVE-2026-14669
SECURITY UPDATE: Heap buffer overflow in tochartimestamptz. DCHtochar copied the timezone abbreviation into a workspace budgeted at DCHMAXITEMSIZ bytes per format character with an unchecked strcpy, and any client can select a longer POSIX abbreviation via SET TIME ZONE CVSS 8.8, arbitrary code...
CLSA-2026-1788270306 Fix CVE(s): CVE-2026-14669
SECURITY UPDATE: Heap buffer overflow in tochartimestamptz: DCHtochar copies the timezone abbreviation into a DCHMAXITEMSIZ-budgeted workspace with an unchecked strcpy, and any client can select a longer POSIX abbreviation via SET TIME ZONE CVSS 8.8, arbitrary code execution as the database OS...
CLSA-2026-1788163557 Fix CVE(s): CVE-2026-14669
SECURITY UPDATE: Heap buffer overflow in tochartimestamptz: DCHtochar copies the timezone abbreviation into a DCHMAXITEMSIZ-budgeted workspace with an unchecked strcpy, and any client can select a longer POSIX abbreviation via SET TIME ZONE CVSS 8.8, arbitrary code execution as the database OS us...