CVE-2022-34028

Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...

PT-2022-3707

Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.5 Description The issue is related to a segmentation violation via the njs utf8 next function at src/njs utf8.h. This can lead to a buffer overflow in memory, potentially allowing a remote attacker to execute arbitrary...

Malicious Package

Overview util-utf8-browser is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious code in cp874-utf8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1544b093a700be489fe2a932061c686a5c7127c7c761caee9f4d34dde781a3b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2221 Malicious code in cp874-utf8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1544b093a700be489fe2a932061c686a5c7127c7c761caee9f4d34dde781a3b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-36650

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves several functions: r str utf8 codepoint, r st...

CLSA-2022-1653499822 Fix CVE(s): CVE-2022-0318

SECURITY UPDATE: Reading beyond the end of a line - debian/patches/CVE-2022-0318.patch: For block insert only use the offset for correcting the length, adjust expected output of the relevant UTF8 block insertion test - CVE-2022-0318...

PT-2022-20433

Name of the Vulnerable Software and Affected Versions GPAC version 2.0.0 Description The issue is related to the misuse of a certain Unicode function, specifically utf8 wcslen renamed gf utf8 wcslen, in the utils/utf.c file. This results in a heap-based buffer over-read, which can be demonstrated...

SimpleSAMLphp Use of insecure connection charset (sqlauth module)

The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions...

GHSA-QV5P-6WRC-79WG SimpleSAMLphp Use of insecure connection charset (sqlauth module)

The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions...

CVE-2021-42194

CVE-2021-42194—XXE in EyouCms : The vulnerability is in EyouCms V1.5.4-UTF8-SP3, where the wechat_return function in /controller/Index.php passes user input directly to simplexml_load_String. The function does not prohibit external entities, enabling a XML External Entity (XXE) injection. Impact ...

PT-2022-16731 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a NULL pointer dereference in the gf utf8 wcslen function, which is a renamed Unicode utf8 wcslen function. Recommendations: For GPAC version 1.0.1, at the moment, there is no informatio...

CVE-2022-0318

Heap-based Buffer Overflow in vim/vim prior to 8.2...

PT-2022-12653

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the ecma new ecma string from utf8 function at /base/ecma-helpers-string.c in JerryScript. The assertion lit is valid cesu8 string string p, string size fail...

PT-2022-15723

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description A heap-buffer-overflow issue was discovered in Jerryscript via the ecma utf8 string to number by radix function in /jerry-core/ecma/base/ecma-helpers-conversion.c. Recommendations For Jerryscript version...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

EyouCms安全漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms, which originates from eyouCMS V1.5.5-UTF8-SP31 Deletion of arbitrary files due to insufficient parameter...

PT-2022-36996

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions md decode utf8 , md link label hash, and md is link reference. No...

PT-2022-11266 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a double-free vulnerability in the gf text get utf8 line function in load text.c, which can be exploited by attackers to cause a denial of service, potentially leading to code execution...