PT-2024-19662

Name of the Vulnerable Software and Affected Versions Time4J Base version 5.9.3 Description A NullPointerException was discovered in Time4J Base via the component net.time4j.format.internal.FormatUtils::useDefaultWeekmodelLocale. However, the existence of this issue is disputed by multiple third...

ROS-20240409-17

Vulnerability of linebytessplit function src/split.c of GNU Core Utilities GNU Coreutils is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

util-linux bug fix update

An update is available for util-linux. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The util-linux packages contain a large variety of low-level system...

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 Checker The CVE-2024-3094 Checker is a powerful...

HashiCorp Response to XZ Utils Supply Chain Attack (CVE-2024-3094)

Summary HashiCorp products and services have no known exposure to the XZ Utils xz/liblzma supply chain attack and associated vulnerability, CVE-2024-3094, at this time. This bulletin will be updated if this situation changes. Background A supply chain attack that introduced malicious code into th...

Vulnerability fixed in liblzma (XZ Utils)

Malicious code has been found in liblzma XZ Utils software. XZ Utils is used for compression of data and may be present in Linux distributions. The vulnerability has been labeled CVE-2024-3094 and has been found in versions 5.6.0 and 5.6.1 of XZ Utils. A malicious party can exploit the...

CVE-2024-25395

A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2...

CVE-2024-25395

A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2...

CVE-2024-25394

A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...

CVE-2024-25394: Buffer Copy without Checking Size of Input

A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...

CVE-2024-25392: Out-of-bounds Read

An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...

CVE-2024-25392

An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...

CVE-2024-25392

An out-of-bounds access (specifically an out-of-bounds read ) exists in the utilities/var_export/var_export.c component of the RT-Thread RTOS. This vulnerability affects RT-Thread versions through 5.0.2 . While the technical root cause is identified as an out-of-bounds access, specific exploitati...

CVE-2024-25392

An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...

CVE-2024-25392

An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...

PT-2024-18920 · Unknown · Web3-Utils

Name of the Vulnerable Software and Affected Versions: web3-utils versions prior to 4.2.1 Description: The issue concerns Prototype Pollution via the utility functions format and mergeDeep due to insecure recursive merge. An attacker can manipulate an object's prototype, potentially leading to th...

[SECURITY] Fedora 40 Update: iwd-2.16-1.fc40

The daemon and utilities for controlling and configuring the Wi-Fi network hardware...

The vulnerability of the `testngXmlExistsInJar` function (testng-core/src/main/java/org/testng/JarFileUtils.java) in the TestNG testing framework allows a attacker to execute arbitrary code.

The vulnerability of the testngXmlExistsInJar function testng-core/src/main/java/org/testng/JarFileUtils.java in the TestNG testing framework is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating...

[SECURITY] Fedora 39 Update: iwd-2.16-1.fc39

The daemon and utilities for controlling and configuring the Wi-Fi network hardware...

CVE-2024-28425

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the loadobj function at /templates/pickleutils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...