11854 matches found
CVE-2023-28461
CVE-2023-28461 affects Array Networks ArrayOS Array AG Series and vxAG (≤ 9.4.0.481). The vulnerability allows unauthenticated remote code execution by exploiting a flag in an HTTP header to browse the device filesystem and reach a vulnerable URL. PTSecurity notes evidence of active exploitation;...
PT-2023-21733 · Array Networks · Array Networks Apv
Name of the Vulnerable Software and Affected Versions: Array Networks APV products versions prior to 8.6.1.262 Array Networks APV products versions prior to 10.4.2.93 Description: A command injection issue was discovered in Array Networks APV products. A remote attacker can send a crafted packet...
Array Networks APV products 命令注入漏洞
Array Networks APV products are a family of array load balancing and application delivery products from Array Networks, Inc. provides the availability, scalability, performance, security, and control necessary to keep applications running in their power band. A security vulnerability exists in...
PT-2023-21734
Name of the Vulnerable Software and Affected Versions Array Networks Array AG Series and vxAG versions 9.4.0.481 and earlier Description A critical security flaw allows remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header...
PT-2023-1685 · Schneider Electric · Powerlogic Hdpm6000
Name of the Vulnerable Software and Affected Versions: PowerLogic HDPM6000 affected versions not specified Description: A CWE-129: Improper validation of an array index issue exists where a specially crafted Ethernet request could result in denial of service or remote code execution...
OSV-2023-165 Heap-buffer-overflow in array_container_to_uint32_array
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56893 Crash type: Heap-buffer-overflow WRITE 4 Crash state: arraycontainertouint32array ratouint32array roaringbitmapserialize...
PT-2023-35693 · Git +1 · Croaring
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves several functions: array container to uint32 array, ra to...
CVE-2022-40539
Memory corruption in Automotive Android OS due to improper validation of array index...
CVE-2022-33256
Memory corruption due to improper validation of array index in Multi-mode call processor...
Memory corruption
Memory corruption in Automotive Android OS due to improper validation of array index...
Memory corruption
Memory corruption due to improper validation of array index in Multi-mode call processor...
php: Fix of 3 CVEs
CVE-2023-0567: crypt: Fix validation of malformed BCrypt hashes - CVE-2023-0568: Fix array overrun when appending slash to paths - CVE-2023-0662: Fix DoS vulnerability when parsing multipart request body...
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-1516)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : ppp (EulerOS-SA-2023-1479)
According to the versions of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component...
Debian: Security Advisory (DLA-63-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : ppp (EulerOS-SA-2023-1454)
According to the versions of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component...
EulerOS 2.0 SP5 : sudo (EulerOS-SA-2023-1516)
According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a...
CVE-2022-40539
CVE-2022-40539 affects Automotive Android OS on Qualcomm-based platforms. Root cause is memory corruption due to improper validation of an array index in the affected component/file. Documented impact is high (confidentiality, integrity, availability) with local, low-effort access required and no...
