18228 matches found
CVE-2022-48282 Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution
Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...
K55245232: GNU glibc vulnerability CVE-2014-9984
Security Advisory Description nscd in the GNU C Library aka glibc or libc6 before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd. CVE-2014-9984 Impact The...
K13523672: Linux kernel vulnerability CVE-2019-12454
Security Advisory Description DISPUTED An issue was discovered in wcd9335codecenabledec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. It uses kstrndup instead of kmemdupnul, which allows attackers to have an unspecified impact via unknown vectors. NOTE: The vendor disputes this...
K12794: GNU C Library vulnerability CVE-2010-4052
Security Advisory Description Note : For information about signing up to receive security notice updates from F5, refer to K9970: Subscribe to email notifications regarding F5 products and security announcements. Note : Versions that are not listed in this Solution have not been evaluated for...
OESA-2023-1110 c-ares security update
Security Fixes: In aressetsortlist, it calls configsortlist..., sortstr to parse the input str and initialize a sortlist configuration. However, aressetsortlist has not any checks about the validity of the input str. It is very easy to create an arbitrary length stack overflow with the unchecked...
CVE-2022-48337
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u " command suggested in the eta...
Input validation
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u " command suggested in the eta...
Siemens JT Open Toolkit Stack Buffer Overflow Vulnerability
Siemens JT Open Toolkit Siemens JTTK is a C++ application programming interface API from Siemens, Germany. It provides support for 64-bit application development on Microsoft Windows, Linux and MacOS. Siemens JT Open Toolkit suffers from a stack buffer overflow vulnerability that can be exploited...
CVE-2022-48337
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u " command suggested in the eta...
c-ares 输入验证错误漏洞
c-ares is a C library for asynchronous DNS requests from the individual developer of c-ares. A security vulnerability exists in c-ares that stems from a lack of checking the validity of input strings, which could be exploited by an attacker to cause a denial of service due to an arbitrarily long...
Debian dla-3323 : libc-ares-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3323 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3323-1 [email protected] https://www.debian.org/lts/security/...
Debian: Security Advisory (DLA-3323-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3323-1] c-ares security update
Debian LTS Advisory DLA-3323-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 18, 2023 https://wiki.debian.org/LTS Package : c-ares Version : 1.14.0-1+deb10u2 CVE ID : CVE-2022-4904 Debian Bug : 1031525 It was discovered that in c-ares, an asynchronous...
DLA-3323-1 c-ares - security update
Bulletin has no description...
Heap-based Buffer Overflow
libgpac.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in mp3dmxprocess function of filters/reframemp3.c due to improper validations of buffer size which allows an attacker to cause an overflow resulting in an application crash...
CVE-2022-26421
Uncontrolled search path element in the IntelR oneAPI DPC++/C++ Compiler Runtime before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
Privilege escalation
Uncontrolled search path element in the IntelR oneAPI DPC++/C++ Compiler Runtime before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
Input validation
Improper handling of Unicode encoding in source code to be compiled by the IntelR C++ Compiler Classic before version 2021.6 for IntelR oneAPI Toolkits before version 2022.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
CVE-2022-26421
CVE-2022-26421 involves an uncontrolled search path element in the Intel® oneAPI DPC++/C++ Compiler Runtime prior to version 2022.0, which may allow an authenticated user to escalate privileges via local access. Affected: Intel® oneAPI Toolkits and specific components listed in sources, including...
CVE-2022-26843
CVE-2022-26843 affects Intel® oneAPI Toolkits, specifically the Intel® oneAPI DPC++/C++ Compiler prior to 2022.1 and related toolkits prior to 2022.2. Root cause: insufficient visual distinction of homoglyphs presented to the user, which may allow an unauthenticated user to escalate privileges vi...