Denial Of Service (DoS)

pidgin is vulnerable to denial of service. An input sanitization flaw was found in the way the AOL Open System for Communication in Realtime OSCAR protocol plug-in in Pidgin, used by the AOL ICQ and AIM instant messaging systems, escaped certain UTF-8 characters. A remote attacker could use this...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service. An off-by-two error was found in the setselection function of the Linux kernel. This could allow a local, unprivileged user to cause a denial of service when making a selection of characters in a UTF-8 console. Note: physical console access is require...

Arbitrary Command Execution

php is vulnerable to arbitrary command execution. The vulnerability exists as it was discovered that the PHP escapeshellcmd function did not properly escape multi-byte characters which are not valid in the locale used by the script. This could allow an attacker to bypass quoting restrictions...

CVE-2019-14235

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uritoiri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences...

Huawei EulerOS: Security Advisory for less (EulerOS-SA-2020-1238)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : less (EulerOS-SA-2020-1238)

According to the version of the less package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8...

CVE-2012-0828

Heap-based buffer overflow in Xchat-WDK before 1499-4 2012-01-18 xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service xchat client crash or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane BMP...

Heap overflow

Heap-based buffer overflow in Xchat-WDK before 1499-4 2012-01-18 xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service xchat client crash or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane BMP...

CVE-2012-0828

Heap-based buffer overflow in Xchat-WDK before 1499-4 2012-01-18 xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service xchat client crash or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane BMP...

CVE-2012-0828

Removed by vendor...

CVE-2012-0828

CVE-2012-0828: A heap-based buffer overflow in Xchat-WDK before 1499-4 (Xchat 2.8.6 on Maemo) could allow remote attackers to crash the client or execute arbitrary code via a UTF-8 line from the server containing characters outside the BMP.

CVE-2012-0828: Out-of-bounds Write

Heap-based buffer overflow in Xchat-WDK before 1499-4 2012-01-18 xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service xchat client crash or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane BMP...

CVE-2020-7046

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...

CVE-2020-7046

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...

CVE-2020-7046

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...

Command injection

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...

CVE-2020-7046

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...

CVE-2020-7046

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...

CVE-2020-7046

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...

CVE-2020-7046: Loop with Unreachable Exit Condition

lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop...