18222 matches found
Integer overflow
protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...
c-kasper.de Cross Site Scripting vulnerability OBB-3259664
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
protobuf-c 输入验证错误漏洞
protobuf-c is a C-based protocol buffer implementation. A security vulnerability exists in protobuf-c versions prior to 1.4.1, which stems from the presence of an unsigned integer overflow...
PT-2023-3201 · Unknown +7 · Protobuf-C +7
Name of the Vulnerable Software and Affected Versions: protobuf-c versions prior to 1.4.1 Description: The issue is related to an unsigned integer overflow in the parse required member function of the protobuf-c protocol serialization data. This can be exploited by a remote attacker to execute...
CVE-2022-48468
protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...
CVE-2022-48468
protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...
CentOS 8 : nodejs:14 (CESA-2023:1743)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:1743 advisory. - The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...
CVE-2022-48468
protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...
CVE-2022-48468
CVE-2022-48468 affects protobuf-c prior to v1.4.1, with an unsigned integer overflow in parse_required_member. Connected advisories confirm the issue across distributions (e.g., Astra Linux, AlmaLinux, Amazon Linux 2, and Mariner/CBL) and consistently cite protobuf-c before 1.4.1 as vulnerable. T...
EulerOS 2.0 SP8 : mod_security (EulerOS-SA-2023-1601)
According to the versions of the modsecurity package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application...
CVE-2022-48468
protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...
DEBIAN-CVE-2023-1990
A use-after-free flaw was found in ndlcremove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem...
c-ares: buffer overflow in config_sortlist() due to missing string length check
A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity...
c-ares: buffer overflow in config_sortlist() due to missing string length check
A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity...
ALSA-2023:1743 Important: nodejs:14 security, bug fix, and enhancement update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 14.21.3. Security Fixes: decode-uri-component: improper input validation resulting i...
Exploit for CVE-2023-30459
CVE-2023-30459 SmartPTT SCADA 1.1.0.0 allows remote code execu...
libvirt bug fix and enhancement update
An update is available for libvirt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvirt library contains a C API for managing and interacting with the...
Shoggoth - Asmjit Based Polymorphic Encryptor
Shoggoth is an open-source project based on C++ and asmjit library used to encrypt given shellcode, PE, and COFF files polymorphically. Shoggoth will generate an output file that stores the payload and its corresponding loader in an obfuscated form. Since the content of the output is...
Oracle Linux 8 : nodejs:16 (ELSA-2023-1582)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-1582 advisory. - Rebase to 16.19.1 Resolves: rhbz2153713 Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920 Resolves: CVE-2022-25881...