fapolicyd: fapolicyd wrongly prepares ld.so path

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...

Learn Raspberry Pi and Arduino with 9 Online Developer Training Courses

This is an exciting time for the Internet of Things. According to Deloitte research, the average U.S. household now has 25 connected devices — and new products are being launched every day. This rush of demand means that many tech companies are looking for developers with IoT knowledge. And even ...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-42013 C implementation of the infamous Apache 2.4.50...

Libmobi has an unspecified vulnerability

Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. A security vulnerability exists in Libmobi versions prior to 0.11, which stems from a buffer over-read. No details of the vulnerability are available at this time...

Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 Remote Root Exploit

Schneider Electric C-Bus Automation Controller 5500SHAC version 1.10 suffers from an authenticated arbitrary command execution vulnerability. An attacker can abuse the Start-up init script editor and exploit the script POST parameter to insert malicious Lua script code and execute commands with...

CLSA-2022-1653933185 Fixed CVEs in vim: CVE-2022-1735, CVE-2022-1733

CVE-2022-1733: fix reading past end of the line when C-indenting - CVE-2022-1735: fix invalid memory access caused by changing text in Visual mode...

CLSA-2022-1653932706 Fixed CVEs in vim: CVE-2022-1733, CVE-2022-1735

CVE-2022-1733: fix reading past end of the line when C-indenting - CVE-2022-1735: fix invalid memory access caused by changing text in Visual mode...

CLSA-2022-1653917554 Fix CVE(s): CVE-2022-1733, CVE-2022-1735

SECURITY UPDATE: Reading past end of the line when C-indenting - debian/patches/CVE-2022-1733.patch: Add extra check for NUL - CVE-2022-1733 SECURITY UPDATE: Invalid memory access when changing text in Visual mode - debian/patches/CVE-2022-1735.patch: Check the Visual position after making a chan...

Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 Remote Root

!/usr/bin/env python3 -- coding: utf-8 -- Schneider Electric C-Bus Automation Controller 5500SHAC 1.10 Remote Root Exploit Vendor: Schneider Electric SE Product web page: https://www.se.com | https://www.clipsal.com Product details: -...

Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 Remote Root Exploit

Summary The C-Bus Network Automation Controller 5500NAC and the Wiser for C-Bus Automation Controller 5500SHAC is an advanced controller from Schneider Electric. It is specifically designed to unite the C-Bus home automation solution with common household communication protocols, from lighting an...

[SECURITY] Fedora 34 Update: kernel-headers-5.17.11-100.fc34

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

[SECURITY] Fedora 36 Update: kernel-headers-5.17.11-300.fc36

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

Fedora: Security Advisory for pcre2 (FEDORA-2022-a3edad0ab6)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DEBIAN-CVE-2022-31650

In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in mymbwclatin1 function of /strings/ctype-latin1.c due to incorrect key in dup value error, allowing an attacker to crash the application via malicious input...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52261)

GNU LibreDWG is a C library for processing DWG files from the GNU community.A heap buffer overflow vulnerability exists in versions of GNU LibreDWG prior to 0.12.4, which stems from a boundary error in copycompressedbytes of decoder2007.c when handling untrusted input. No detailed vulnerability...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52260)

GNU LibreDWG is a C library for processing DWG files from the GNU community.A heap buffer overflow vulnerability exists in versions of GNU LibreDWG prior to 0.12.4, which stems from a boundary error in copybytes of decoder2007.c when handling untrusted input. No detailed vulnerability details are...

CVE-2022-29337

C-DATA FD702XW-X-R430 v2.1.13X001 was discovered to contain a command injection vulnerability via the vacmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary commands via a crafted HTTP request...

CVE-2022-29337

C-DATA FD702XW-X-R430 v2.1.13X001 was discovered to contain a command injection vulnerability via the vacmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary commands via a crafted HTTP request...

Command injection

C-DATA FD702XW-X-R430 v2.1.13X001 was discovered to contain a command injection vulnerability via the vacmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary commands via a crafted HTTP request...