19370 matches found
The vulnerability of microprogrammed software in PACsystems programmable logic controllers, related to insufficient verification of data authenticity, allows a intruder to execute arbitrary code.
The vulnerability of microprogrammed programmable logic controllers from PACsystems is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code using a specially crafted file written in...
GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52252)
GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...
GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52257)
GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...
GNU LibreDWG Stack Overflow Vulnerability
GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a stack overflow vulnerability, for which no detailed vulnerability details are currently available...
GNU LibreDWG Double Release Vulnerability (CNVD-2022-52258)
GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a double-release vulnerability, for which no detailed vulnerability details are currently available...
protobuf-c denial-of-service vulnerability
protobuf-c is a protocol buffer implementation based on C. A denial of service vulnerability exists in Protobuf-c v1.4.0, which stems from a function parsetagandwiretype in protobuf-c/protobuf-c.c that contains an invalid arithmetic shift. An attacker could exploit this vulnerability to cause a...
Buffer Overflow
dbus-broker:sid is vulnerable to buffer overflow. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied...
c-sait.net Cross Site Scripting vulnerability OBB-2674640
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. It contains an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to it...
Backdoor.Win32.Shark.btu MVID-2022-0615 Insecure Permissions
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/5a83f8b8c8a8b7a85b3ff632aa60e793.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Shark.btu Vulnerability: Insecure Permissions Description: The malware writ...
ALPINE-CVE-2022-33070
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...
DEBIAN-CVE-2022-33067
Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions getmagic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors...
CVE-2022-33032
LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decodepreR13sectionhdr at decoder11.c...
CVE-2022-33070
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...
CVE-2022-33034
LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copybytes at decoder2007.c...
AZL-9973 CVE-2022-33070 affecting package protobuf-c for versions less than 1.4.0-2
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...
Stack overflow
LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copybytes at decoder2007.c...
CVE-2022-33070
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...
Code injection
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...