11854 matches found
CVE-2023-28461
Array Networks Array AG Series and vxAG 9.4.0.481 and earlier allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could then be exploited through a vulnerable URL. The 2023-03-09...
Array Networks ArrayOS AG 授权问题漏洞
Array Networks ArrayOS AG is an SSL-VPN product from Array Networks that enables secure remote access regardless of user, device or location. It provides scalable and controllable remote and mobile access to corporate networks, enterprise applications and cloud services for any user, any device,...
Array Networks APV products 命令注入漏洞
Array Networks APV products are a family of array load balancing and application delivery products from Array Networks, Inc. provides the availability, scalability, performance, security, and control necessary to keep applications running in their power band. A security vulnerability exists in...
PT-2023-21734
Name of the Vulnerable Software and Affected Versions Array Networks Array AG Series and vxAG versions 9.4.0.481 and earlier Description A critical security flaw allows remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header...
PT-2023-1685 · Schneider Electric · Powerlogic Hdpm6000
Name of the Vulnerable Software and Affected Versions: PowerLogic HDPM6000 affected versions not specified Description: A CWE-129: Improper validation of an array index issue exists where a specially crafted Ethernet request could result in denial of service or remote code execution...
OSV-2023-165 Heap-buffer-overflow in array_container_to_uint32_array
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56893 Crash type: Heap-buffer-overflow WRITE 4 Crash state: arraycontainertouint32array ratouint32array roaringbitmapserialize...
PT-2023-35693 · Git +1 · Croaring
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves several functions: array container to uint32 array, ra to...
CVE-2022-40539
Memory corruption in Automotive Android OS due to improper validation of array index...
CVE-2022-33256
Memory corruption due to improper validation of array index in Multi-mode call processor...
Memory corruption
Memory corruption due to improper validation of array index in Multi-mode call processor...
Memory corruption
Memory corruption in Automotive Android OS due to improper validation of array index...
php: Fix of 3 CVEs
CVE-2023-0567: crypt: Fix validation of malformed BCrypt hashes - CVE-2023-0568: Fix array overrun when appending slash to paths - CVE-2023-0662: Fix DoS vulnerability when parsing multipart request body...
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-1516)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : ppp (EulerOS-SA-2023-1479)
According to the versions of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component...
Debian: Security Advisory (DLA-63-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : sudo (EulerOS-SA-2023-1516)
According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a...
EulerOS 2.0 SP9 : ppp (EulerOS-SA-2023-1454)
According to the versions of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component...
CVE-2022-40539
CVE-2022-40539 affects Automotive Android OS on Qualcomm-based platforms. Root cause is memory corruption due to improper validation of an array index in the affected component/file. Documented impact is high (confidentiality, integrity, availability) with local, low-effort access required and no...
